last executing test programs: 15m35.414872018s ago: executing program 1 (id=5778): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x9, 0x9, 0xffff}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15m35.006568817s ago: executing program 1 (id=5780): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}]}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x588, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]) r3 = socket$inet6(0xa, 0x3, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="181401000040000014001280090001007866140a726d000000000400028005001a8008"], 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x448c0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6, 0xe737}}, 0xffffffffffffffa9) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f59190200867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) getdents(r4, &(0x7f0000001080)=""/4096, 0x1000) 15m33.376949026s ago: executing program 1 (id=5787): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNGETVNETLE(r0, 0xc0189436, &(0x7f0000001940)) r1 = socket$kcm(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000080)=""/110, 0x6e}, {&(0x7f00000047c0)=""/4047, 0xfcf}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f0000000140)=""/109, 0x6d}, {&(0x7f0000001780)=""/14, 0xe}, {&(0x7f00000011c0)=""/209, 0xd1}], 0x6}, 0x40000100) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046bf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe8600000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) syz_emit_ethernet(0x170, &(0x7f00000002c0)={@multicast, @multicast, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x1, 0x0, 0x3}}, {@ipv4={0x800, @igmp={{0x21, 0x4, 0x3, 0x1, 0x15a, 0x64, 0x0, 0x10, 0x2, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x23}, {[@lsrr={0x83, 0xf, 0x55, [@broadcast, @broadcast, @empty]}, @timestamp_addr={0x44, 0x14, 0x8b, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x25e}, {@loopback, 0x1}]}, @end, @timestamp_addr={0x44, 0x1c, 0x3f, 0x1, 0x5, [{@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@empty, 0x8}]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x1, 0x2}, {0x0, 0x12, "89c128b339ba2c8fe57a6b4105943e74"}, {0x6, 0xc, "47056a84d2b336322e83"}, {0x5, 0x8, "9010ac5f8a62"}]}]}}, {0x1e, 0x9, 0x0, @remote, "a5518247f8f440edb8c797a74d1c4fc5f2e46d2dc919f2e04449d79298dd46c2ed3d82defd388e0311510caf3aca4bc12ef34675f8a9de715a7b52282e17130365cd054dbd3acce63bb8b8fe632137fb72d142a8dda5f107b39b18b6406f7c61c73f71c8a75e78da83fa1b9dc57812f0122840ed6d4beb59a537a6689a5af35fd92cfd1fbaf933423cfae5a57216395aed4fc6a68c36935552ac36c78a040beba6326881e2de932c19e1aca92e5c4c14b9ada850297f09e66bcc2497965e78b397e0b7d8ee9b1cf1852e5ca4e68e"}}}}}, 0x0) 15m32.863014043s ago: executing program 1 (id=5790): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x40}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"01fbf5ab5e256df932bde953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0x2}, @connect={{0x80}, {0x0, 0x5}}}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x9, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x7, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @note={0x8, 0x1, 0x0, 0x2, 0x9}}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick=0x1000000}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) 15m32.735427184s ago: executing program 1 (id=5791): ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102070109023600010000000009040000042ec25d0009050200000000000009050c0000000000000905e8cd"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'addrtype\x00'}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 15m30.84700216s ago: executing program 1 (id=5795): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) (async) mknod(&(0x7f0000000040)='\x00', 0x20, 0xffff) r1 = open$dir(&(0x7f0000000100)='./file1\x00', 0x159800, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x14, 0x0, @void}, 0x1d) (async) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) (async) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r7 = memfd_secret(0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000001c0)={0xb}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x8004004, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c9, 0x7000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xffff1000}) (async) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r8) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c01000010001307000000005eb9fb5332b8d62b0001200100000000000000000000000000010000000000000000000000003b00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0x7, 0xb28, 0x8000, 0x1, 0xffffffff, 0x219, 0x80000001, 0x2, 0xffff, 0x10000, 0x0, 0x67, 0x81, 0x2008000, 0x3, 0xffff6d20, 0x9, 0x5, 0xfffffffd, 0x6b3, 0x10001, 0xfffffffe, 0x7, 0x7ff, 0x8, 0x8, 0x61c9, 0xfe, 0x2, 0x0, 0x80, 0x0, 0x7, 0x17be0, 0x4, 0x7ff, 0x1ff, 0x0, 0x4, 0x9, 0x3, 0xffffffff, 0xa2f3, 0x0, 0x37e, 0xf, 0x1, 0x8, 0x1ff, 0xe1da, 0x1, 0x8, 0x2, 0x0, 0x8000, 0x1, 0x0, 0x5, 0xfffff000, 0x9, 0x6ad, 0x8, 0x8000, 0x200, 0x10000, 0x9, 0x1, 0x7682, 0x7fffffff, 0x43, 0xfffffff7, 0x5, 0x1, 0x4, 0xcf18, 0x4, 0x9, 0xfff, 0x3, 0x4, 0x2, 0x3, 0x81c600, 0x5, 0xeb, 0x6, 0x8, 0x9, 0x9, 0x8000, 0x7, 0x4, 0x0, 0x1000, 0xc56, 0x9, 0x8, 0x7ff, 0x2, 0x5, 0x4, 0x3, 0x5, 0x0, 0x7, 0x40, 0x9, 0x101, 0x1, 0xae6a, 0xf, 0x6, 0x1, 0xffff, 0x9, 0x6, 0x3, 0x6, 0x8000, 0x3, 0x100, 0xfffffff3, 0xffff, 0x3, 0x6, 0xffffffff, 0x800, 0xfffffff3, 0x1, 0x0, 0xfffff2f2, 0xea12, 0x37cf, 0x1ff, 0x0, 0x8, 0x5ca6, 0x7, 0x7, 0xffffffff, 0x1ff, 0x6, 0x0, 0x3, 0xffffff55, 0x1, 0x7, 0x9, 0x7, 0x1c0, 0x1, 0x40, 0x3, 0x6, 0x1000, 0x3, 0x1, 0x1, 0xf7d3, 0x7fff, 0x89, 0x8000, 0xb41, 0x8, 0x8000, 0x29b453ca, 0x9c, 0x3, 0x1000, 0x0, 0x9, 0x6, 0x2, 0x10000, 0x6, 0xe, 0x7, 0x376, 0x0, 0x557b, 0x5, 0x5, 0x3, 0x6, 0x8, 0xa, 0x7, 0x3b03, 0x60000, 0x89, 0xe9fe, 0xe, 0x4, 0xffffffff, 0x7, 0x9, 0x1, 0x7fffffff, 0xa5, 0x1, 0x80000001, 0x9, 0xf5, 0x9, 0x9, 0x7, 0x1, 0x7, 0x800, 0x3, 0xfff, 0xffff, 0xfffffffc, 0x5, 0xfffffffd, 0x7, 0x1, 0x101, 0x1, 0x1, 0xc, 0x9, 0x5, 0x1000, 0x3, 0xfffffff8, 0x948, 0x4, 0x3, 0xbfd2, 0x0, 0xcdbb, 0x9, 0x2, 0x1, 0x81, 0x6, 0x6, 0x0, 0x3, 0x4, 0x80, 0x7, 0x40000000, 0xf, 0x1, 0x9, 0x40, 0x80000000, 0xfffffffd, 0xffff25ef, 0x101, 0xa, 0xcb3]}]}}]}, 0x45c}}, 0x44080) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@gettaction={0xc4, 0x32, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9f9}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0xc4}}, 0x800) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f0010020000e8ff010902120001000000000904"], 0x0) 15m15.646530182s ago: executing program 32 (id=5795): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) (async) mknod(&(0x7f0000000040)='\x00', 0x20, 0xffff) r1 = open$dir(&(0x7f0000000100)='./file1\x00', 0x159800, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x14, 0x0, @void}, 0x1d) (async) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) (async) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r7 = memfd_secret(0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000001c0)={0xb}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x8004004, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c9, 0x7000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xffff1000}) (async) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r8) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c01000010001307000000005eb9fb5332b8d62b0001200100000000000000000000000000010000000000000000000000003b00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0x7, 0xb28, 0x8000, 0x1, 0xffffffff, 0x219, 0x80000001, 0x2, 0xffff, 0x10000, 0x0, 0x67, 0x81, 0x2008000, 0x3, 0xffff6d20, 0x9, 0x5, 0xfffffffd, 0x6b3, 0x10001, 0xfffffffe, 0x7, 0x7ff, 0x8, 0x8, 0x61c9, 0xfe, 0x2, 0x0, 0x80, 0x0, 0x7, 0x17be0, 0x4, 0x7ff, 0x1ff, 0x0, 0x4, 0x9, 0x3, 0xffffffff, 0xa2f3, 0x0, 0x37e, 0xf, 0x1, 0x8, 0x1ff, 0xe1da, 0x1, 0x8, 0x2, 0x0, 0x8000, 0x1, 0x0, 0x5, 0xfffff000, 0x9, 0x6ad, 0x8, 0x8000, 0x200, 0x10000, 0x9, 0x1, 0x7682, 0x7fffffff, 0x43, 0xfffffff7, 0x5, 0x1, 0x4, 0xcf18, 0x4, 0x9, 0xfff, 0x3, 0x4, 0x2, 0x3, 0x81c600, 0x5, 0xeb, 0x6, 0x8, 0x9, 0x9, 0x8000, 0x7, 0x4, 0x0, 0x1000, 0xc56, 0x9, 0x8, 0x7ff, 0x2, 0x5, 0x4, 0x3, 0x5, 0x0, 0x7, 0x40, 0x9, 0x101, 0x1, 0xae6a, 0xf, 0x6, 0x1, 0xffff, 0x9, 0x6, 0x3, 0x6, 0x8000, 0x3, 0x100, 0xfffffff3, 0xffff, 0x3, 0x6, 0xffffffff, 0x800, 0xfffffff3, 0x1, 0x0, 0xfffff2f2, 0xea12, 0x37cf, 0x1ff, 0x0, 0x8, 0x5ca6, 0x7, 0x7, 0xffffffff, 0x1ff, 0x6, 0x0, 0x3, 0xffffff55, 0x1, 0x7, 0x9, 0x7, 0x1c0, 0x1, 0x40, 0x3, 0x6, 0x1000, 0x3, 0x1, 0x1, 0xf7d3, 0x7fff, 0x89, 0x8000, 0xb41, 0x8, 0x8000, 0x29b453ca, 0x9c, 0x3, 0x1000, 0x0, 0x9, 0x6, 0x2, 0x10000, 0x6, 0xe, 0x7, 0x376, 0x0, 0x557b, 0x5, 0x5, 0x3, 0x6, 0x8, 0xa, 0x7, 0x3b03, 0x60000, 0x89, 0xe9fe, 0xe, 0x4, 0xffffffff, 0x7, 0x9, 0x1, 0x7fffffff, 0xa5, 0x1, 0x80000001, 0x9, 0xf5, 0x9, 0x9, 0x7, 0x1, 0x7, 0x800, 0x3, 0xfff, 0xffff, 0xfffffffc, 0x5, 0xfffffffd, 0x7, 0x1, 0x101, 0x1, 0x1, 0xc, 0x9, 0x5, 0x1000, 0x3, 0xfffffff8, 0x948, 0x4, 0x3, 0xbfd2, 0x0, 0xcdbb, 0x9, 0x2, 0x1, 0x81, 0x6, 0x6, 0x0, 0x3, 0x4, 0x80, 0x7, 0x40000000, 0xf, 0x1, 0x9, 0x40, 0x80000000, 0xfffffffd, 0xffff25ef, 0x101, 0xa, 0xcb3]}]}}]}, 0x45c}}, 0x44080) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@gettaction={0xc4, 0x32, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9f9}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0xc4}}, 0x800) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f0010020000e8ff010902120001000000000904"], 0x0) 2m42.742863743s ago: executing program 3 (id=7379): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x149041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000004100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2m42.618693959s ago: executing program 3 (id=7380): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x0) 2m42.583115675s ago: executing program 3 (id=7381): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb0603000000000023010902240001000064000904340102d469e70009058acf"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2m41.065515694s ago: executing program 3 (id=7387): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000ee00eaff0109022400010000050009040080ff030000000921040000f401228500090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) bind$alg(r2, 0x0, 0x0) (async) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/243, 0xf3}], 0x1) (async) unshare(0x60480) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, 0x0, 0x0, 0x0) (async) write$UHID_CREATE(r1, &(0x7f0000000380)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000300)=""/5, 0x5, 0x0, 0x4, 0x1, 0x400001, 0x4}}, 0x120) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = fsopen(&(0x7f0000000580)='coda\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) (async) r9 = openat(r4, &(0x7f00000005c0)='./file0\x00', 0x204000, 0x11) getdents64(r9, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20044800}, 0x400c860) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r8) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000800)) 2m37.882657392s ago: executing program 3 (id=7395): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000011000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900f0f203000235090100000000009500000005000000bf98000000000000560800000200000085000000ba000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m37.750153868s ago: executing program 3 (id=7396): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0) exit(0x6) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc0a85320, &(0x7f00000000c0)={0x1080}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b0200000000000061114c000000000085000000a40000009500000005007586285866cbd92f204f00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x6, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x30) read$FUSE(r2, &(0x7f0000004000)={0x2020}, 0x2020) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x48000) 2m22.653493596s ago: executing program 33 (id=7396): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0) exit(0x6) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc0a85320, &(0x7f00000000c0)={0x1080}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b0200000000000061114c000000000085000000a40000009500000005007586285866cbd92f204f00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x6, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x30) read$FUSE(r2, &(0x7f0000004000)={0x2020}, 0x2020) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x48000) 10.142495887s ago: executing program 4 (id=7942): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0xb7d4, 0x1001f0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x10, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x1, 0x5}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x0, "d885700585"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0x1, 'b', 'Qq\t'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x14, 0x4, 0xcc, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1002}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6896, 0x2, 0x0, "78f4cd9535ca"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0xf4}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380000003e000701fefffffffcffffff017c000008004280040008000c00018006000600800a00001000028009000c80"], 0x38}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000080), &(0x7f0000000200), 0x2, 0x2) r8 = dup(r7) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r8, 0x4068aea3, &(0x7f0000000000)) read$FUSE(r4, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000001200)={0x50, 0x0, r9, {0x7, 0x27, 0x0, 0x500000, 0x403}}, 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000240)={0x10, 0x0, r10}, 0x4d) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@remote}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x1a0}}]}, 0x158}}, 0x0) 10.078555615s ago: executing program 2 (id=7943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x404841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_TMR_TEMPO(r3, 0xc0045405, &(0x7f00000000c0)=0x6b) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r4, 0xa3c3}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000002c0)="ff004000", 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 9.344086176s ago: executing program 2 (id=7945): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x149041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000ffc900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 9.130385055s ago: executing program 2 (id=7946): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000fffffffffffffffe00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 8.718609162s ago: executing program 2 (id=7947): ptrace(0x10, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x18}, 0x20000810) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36c") read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r3, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006680)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x4, 0x1, 0xfffffffffffffff3, 0x0, 0x9, 0x0, {0x2, 0x80000808000080, 0x3, 0x6, 0x800000000003, 0x100000000000008, 0x80000000, 0x4, 0x6, 0x0, 0x7fffffff, r2, r3, 0x0, 0xcc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001500)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001540)={{{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private0}}, &(0x7f00000007c0)=0xfffffffffffffe91) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001680)={0x0, 0x0, 0x0}, &(0x7f00000016c0)=0xc) r8 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000005c0)=r8, 0x12) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001980)={{{@in6=@ipv4={""/10, ""/2, @private}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@multicast1}}, &(0x7f0000001a80)=0xe8) r12 = getgid() r13 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001ac0)='cpu.max.burst\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000ac0)={{{@in6=@private0, @in=@empty}}, {{@in6=@private1}, 0x0, @in=@multicast1}}, &(0x7f0000000900)=0xa0ad048482541cc) getgid() r14 = getpgid(0x0) lstat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001d00)={0x0}, &(0x7f0000001d40)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001d80)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) r18 = syz_usbip_server_init(0x2) r19 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r19, 0x40087543, &(0x7f0000000080)=ANY=[]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="1a6b7080d218a8d3831253e14f2190ac1ef401c6fe750d9d497bbe584c8a69dd0ff38b17e685498b8e1c11ddc46367c9862a2d222b0b39d43680815ed0a4b09f7ea1885c03d698662025ef96e1937e4a494134160789a827e8fe3a507ce439ce353cefc546358ffbb6a9f0ee8138259a25148fa71871b8efb0f407dd5cf671884f0bc32924b4a4caa4bd6700795a6e23a5065a78b87bc7fd531955677c928560f23744280b9021785f010e3c1dc41e4ee35a0bb5b977c55e9380356e9301ff769e36bcb394b6fc56375822629e714ee36877ab94b0cc986ac9b2a6245ba85e8a265448b977131cb637c0d71c3b049f", 0xef}, {&(0x7f0000000140)="40ee0100000001000000da266c010047455abbb6bbe6ae0cc63698f85f8f", 0x1e}, {&(0x7f0000000180)="730114ee1fe42012fe86816762f70c01e32cc8dc62fd89355e5da0d27391ea17e3624192bf6d6a774c116e10176dbf975acdc674c9f0a49d5674ec87bcfb4b87c033d312b2a6994038a09404dcd27e750317929411d437f949568d263b30d4a72aeac8712262247294198cb6fde9e9b84e203ae63338aaf4be25", 0x7a}, {&(0x7f0000000200)="5ce27ff0f9968c17e51c3b747b62542650bbc742e0c610e1eb4a16f96be697ff38663a57bbdde398f2fdb83f662c52600a1c05655fd53061797a5765cad43ecd401bf717bb514a14ce78939e7c4484b95aecbdf1b7c049508be1cecb157b8ef6766840d26de9c8b40d3c70a599ef4da44c759d8474c620ef4a51ad89c40d11ad8dac6ef3b76e1f633070ba14e2c91afbe92fdb8910728f9d183d53c95aa61a1a44d45440d5bf5b4d4d2cd044273447b49621d63309ffa17f0e91775c3c1b", 0xbe}, {&(0x7f00000002c0)="8f154b8d259911663c04de1609dba2276ccc5ad9dca695c5fa7b8f59314023d0d3447379242fde8d928f45d3bf6a352fbbeb8daf3354003f740137f881553d27170be45a5a0e1cb3ba08c463d501bd60e43e59c691fdad3dd4b31d07f9ad9e6785d1cecc89edf9df269b92dda4b5cc3c282b808c4bd89a41e3eb39778cc6777599c31dd617c4e0", 0x87}, {&(0x7f0000000400)="b35c3b5d8dd803451ccb601befd136790cf8ea672ac0b464766d7ebd9d6ae1484a5e9adc812eba914b628e6127b61b788d6ab83e31fe582b57fc3925b3707fbf418ac484afe4495f03a9b4c456bb53d2588531ad837295", 0x57}, {&(0x7f0000000480)="a9dc594fbe61ae72b930416f8d8ecb54f175930d25480b49c61c54d2d710ff485543c974df555282a86a1e16ccead002480c471e2c729dd6759835c3a1dfcd6fc8fb8bb6d8f80211c1933830d1b7713b55872d67c3f1", 0x56}, {&(0x7f0000000500)="33fb20469e4dcf42f2c26ab6c012a60899c3fcbe71d9abce23fec051117cb0ea91fd09e7a5722cd944a4467d0d54b20cd57f1cdc89e861609ac130d96ff11f04dfe5a0e3521549fe6e3abeb47705c62e89b0612de8e357bd4bfd8b4a3f7c159bf9b96f57f33eb35878010b0cabf46f4d11b7e587f7443c7d60a9e780dab331f59a14e768114d29462754256f5bdfbabc18484d03be8a2d2d9b9e2dc7e58916c992c4cadb601b", 0xa6}, {&(0x7f00000005c0)="93cf4ff14f9c0aea086f30867a4ca0f9683a1d8a772901afa6aaaf5ffbb51ca683cf7dcbe2fb976a69ca705c84c668458e1a226919609356f7ca85c0a13f21ac3cb8d8415467f17182649f2bf040fe6614c809a152a82cdbd70c84118c3097a3d459380718212d5ac91df679a74d71c20154e212fc2d49d72052120afefe44df893ac53028868c8cb869d6417f4ed36f099ec20d6685f330a5536050020d913e2754bf1e43b18a390ea08c7101499efeadafc0eb6f871c6bb0c76d11423d66d9ffb8930fa2511759", 0xc8}], 0x9, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYRESDEC=r18, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c826c9633da56e3100000000"], 0x108, 0x20040000}}, {{&(0x7f0000001080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001100)="549ee35bac8845ffbe1be081fe1127ba3c88c84286e2bf570fc46cf0dae09be083da22d7088614e5a4648f10c0b4efb7e8b983278a2106c4e9d2dbd317650136a9c0895ead04ba558434b5f7e664d863906ad8232f0d9ce99a1ba372213b301a96436dd208d0dc560a8798da9702a9385f98cbf0da9da0c38cb8959481f7d6842d047e6c19cdb04f46be807fe511d5c5174eb473aa642e2aac3495db7df168077fd0344c7bd33bc0dfbe41f40dd59ce65973154888136ea1ee1650b27a75fffd5e0a5878e1ecbe7858db10e54cec969cb7aa01dbb4726f24a93b8ce620d27e5a", 0xe0}, {&(0x7f0000001200)="49da62de3f90410f417d3bc63115e020a02faf8c03fb3bbcb2035f0de571bbeb9211e4b03a0d0b9e3348f2ff763e53f6cf14a201bd8581d0c6c26f3e212a827e83d9b4518336dd2d28ffd68f43b84fdb8463c730daf77822fb9dcd5b3ae47a74190cbda6bb32825dd44eca4b73fb43b39c642750cb2b60c4944faba2a6e7232a1692d63389f1cf901e313560f5123d5f978c4be17a8b30c668c93c69de0634c26f85940ec4ee088e0bd911cc1c5b90cdd4318e38dd3e5ffbe02e21", 0xbb}], 0x2, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r7}}}], 0xa0, 0x4000001}}, {{&(0x7f00000017c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001840)="6792333ebdfd49b5bd113e91db66d42993bf9606fa2c44bb67bde9a2725eb968bec0986e1401084647bff012c11ce2fe072576114f19c2a14519bdf73265de68833f4e5a0beb137bd245988a4f17c9fc88cf0e54c71f553b432506ceff16480afabfef256037df1c910e55f1c1d2fea874d70cbaf01577307ca8458dc04e53a25fb80051a597c4ab7314d7dc3fa1cbbc93d4fa4e60be8da4b6a80d6d72851866ac700962e3f9abbf70928b3a60d8bf3373aa4c44c4ac37487871ef067cf6e60b5ca435a3b8bf724169485d5fea5488536d67b74a560210fcef922d28b6439326c950977b07a026c1337246", 0xeb}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r13, @ANYBLOB="0000000014000007000010000100000001000000", @ANYRES32=r10, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x8000}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001ec0)}, {&(0x7f0000001f00)="7e1b754262b4500f8cf4d054579d33b64f3eee26deff1d9eff4dea7bb1551c6af3e0bbd3d75c3adb80dc22140f926928309a078cb096832577949a", 0x3b}, {&(0x7f0000001f40)="274effad978c1ea0254e63d4fb1755f8e896673dc82f9d542e762d132eee2888b552da47d7a9d04bb31a107c38cb1bd79066939795bf87c8b3f9d46e158f9b78bb7cc208eb90cbf57b492bc2e8c2b108a0db28bb7653105846c9f222f167c392b06dd584a66d", 0x66}, {&(0x7f0000001fc0)="4194f2efcaa4f72d30c6b00de980bb9e16cb1f77ac735a087cbfa5029f2172e7880e7c048150b8b4a4a462f626781f70f4b623245e4c9cd7258587e4642120ad5cfe89fbe7566cb6dada1b7c5e6a1b326cc13a5c30ae5a2f4bec164567a3221c8bfd8abc740f523d17c74a69f235ced68e89c1c295e34dc1f2e6ebb47819a9e4ba2d9e488788a84970491c867bc070b9bbace20c8573240d7df1db0443c13d12abf5f494f7ce5d574b", 0xa9}], 0x4, 0x0, 0x0, 0x20000080}}, {{&(0x7f00000020c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000002140)="1542f5184519dd82e8a99644d095a08b3d92288d3a82092cadd4d023d207a29a71a557b2b8ca4f26845aab42fcf2f9634a12b019b401895ca60a16199a0455d018b6be0b1dffed5730ed2f", 0x4b}, {&(0x7f00000021c0)="e47bc991626f2d2b6748c0d1f0f0cf4987f836bf74b1cbd861d4ef42576adc570524fe474053e3034e676d302de124595451c7a3d9b4263d68c0bc6d165f028225fab0e574db7495c43f11f1aed09fc3a2cbff191326c406ed0a6f7ee4278bff307c9d4a6650ac84fce13cb2f193c71902f6414f6f67eedf4d5cc1da8c75ad0c19240c5bb449e22c99eeca880ab80c2a670c3db1e2217882c0ae72a2987a74a39bf06fbe94e20d98d667", 0xaa}, {&(0x7f0000002280)="c2a071c8a83d30b75f7ac08815b05544e7674cde5b3590f44a34b00cbe3dbb81f37fac", 0x23}], 0x3, &(0x7f0000002300)=[@rights={{0x30, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r0, r0, r18, r19]}}], 0x30, 0x4000895}}], 0x5, 0x40488d1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, 0x1c) syz_usb_connect(0x3, 0x48, &(0x7f0000000000)=ANY=[], 0x0) 6.189505431s ago: executing program 4 (id=7954): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000280)={0x4, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x1, 0x0, 0x2, 0x0, 0x9}}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) syz_clone(0xa40c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000100)={0x0, 0x8, "8a59cb1ce81bb9d4e07745e43c8151d1a203e9a5be59eaa294d98b5c505b6d4f", 0x9, 0x1, 0x0, 0xff, 0xfffffff0, 0x4, 0x2, 0x1ff, [0x8, 0x9, 0x2, 0x6]}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{}, "534d21b0b45ea695", "68598e41a8c70438d61c623e5277bc43d33988d8f655a635a75cbaefaa37ed42", "30c517bb", "5ebd10d4448d926f"}, 0x38) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000040)=0x10000) close(0x3) 6.146312669s ago: executing program 5 (id=7955): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf256c0000000800", @ANYRES32=0x0, @ANYBLOB="0100000012cc62"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt(r5, 0x0, 0x5, 0x0, &(0x7f00000000c0)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000000), 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000540)={'ip_vti0\x00', {0x2, 0x4e23, @empty}}) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000001400030076657468305f746f5fda626f6e6400000014002b80050003000f000000080003000d0000"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r10 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x41, 0x4}, 0x4}}, 0x10) ioctl$VIDIOC_SUBSCRIBE_EVENT(r10, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="f0f0f3efa1f7ab58f37cf538d29c1dc1fcbc7aea8ce72fda471ae80e211ff618"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x15, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x200, 0x5, 0x4, 0xff, 0x9, 0x8}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}]}}}]}, 0x90}}, 0x0) 5.995028092s ago: executing program 6 (id=7956): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff580", 0x4, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x80800) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000000)) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYRES8=r3, @ANYBLOB="75ed90080e3393843302042f859365bba0792730a113c570c130499d17a47930bfc966c57f85debb653993ccc2113bbf133aa91246472210e33e4f25dd642f294a73cb98d5984e301136a24eaf35565777caa723c071fc787c083b3926b3408413c9d7c2ca6d559f2f44df5d86f979676834044e05fc6c55e6a9eb5fe1c8766360226c17444d3cdff0039a949a979eef4c68eccaddd2192f8f5a5b1549269a5ba372ffb0687ba94da9585c7036e1"], 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) 5.762392993s ago: executing program 0 (id=7957): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000ffffffffffffefff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 5.335081135s ago: executing program 0 (id=7958): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000240)=@vsock, 0x80, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/100, 0x64}, {&(0x7f0000000540)=""/188, 0xbc}, {&(0x7f0000000680)=""/231, 0x7c}, {&(0x7f0000000780)=""/143, 0x8f}], 0x4, &(0x7f0000000900)=""/154, 0x9a}, 0x2}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f00000002c0)={0xfd75, 0x5, 0x10, 0x0, 0xb, 0x8, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0x7fff7ffc}]}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x20000000) r4 = socket$kcm(0x10, 0x2, 0x0) mmap$qrtrtun(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x13, 0xffffffffffffffff, 0x9) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r5) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000080000000000070000000c000180050002002c"], 0x20}, 0x1, 0x0, 0x0, 0x4001c000}, 0x0) listen(r2, 0x8) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendto$inet(r7, 0x0, 0x0, 0x4000, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000000000000000000001400078008001140000000fa050015000dc57de7ab1eb8c6220000000500050003000000050036b3d3beabe682fc375e3d1f0400000000000d000f00686173683a6e6574000000000900020073797a3200000000090002007379dc519f1200"/116], 0x68}}, 0x0) 5.302007337s ago: executing program 2 (id=7959): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106605043000000000000109022400017f0000000904000404030002000921000000012203000905810340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x4, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x101b, 0x4, 0x0, 0x0, 0x5, 0x4}}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000001080)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/rcu_expedited', 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x48, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xaf}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x48}}, 0x10) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB='-', @ANYRESHEX, @ANYBLOB="38bc22c1"], 0x28) mbind(&(0x7f0000f01000/0x3000)=nil, 0x3000, 0x3, 0x0, 0xfffffffffffff001, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.390582598s ago: executing program 5 (id=7960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4844}, 0x4800) 4.338656515s ago: executing program 0 (id=7961): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000040), 0x2, 0x0, 0xcccccccc}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = getpid() syz_pidfd_open(r2, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) 4.312292464s ago: executing program 6 (id=7962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000203050000000000000000007f0000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000050) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004801}, 0x4) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f0000000080)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000200)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x3, 0x0, 0x2, {0x5, @vbi={0xb5, 0x8000004, 0x3, 0x30314442, [0x0, 0x18000000], [0x8200, 0x1]}}, 0xe}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000203050000000000000000007f0000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000050) (async) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004801}, 0x4) (async) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) (async) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f0000000080)) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_clone3(&(0x7f0000000200)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x3, 0x0, 0x2, {0x5, @vbi={0xb5, 0x8000004, 0x3, 0x30314442, [0x0, 0x18000000], [0x8200, 0x1]}}, 0xe}) (async) 4.283589533s ago: executing program 5 (id=7963): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8}]}, 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x50bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x67eb6bf12151d48d}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x957, 0x1, 0x40, 0x10001}, {0x8, 0x2, 0xd, 0x92b, 0x200, 0x2e}, 0x3, 0x9, 0x14c5}}, @TCA_TBF_RATE64={0xc, 0x4, 0xcd3d9f535b42d61}, @TCA_TBF_PBURST={0xfffffffffffffe3a, 0x7, 0x126e}]}}]}, 0x78}}, 0x44080) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xb}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r6, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44084}, 0x8800) 3.834559167s ago: executing program 6 (id=7964): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/kernel/oops_count', 0x400, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @window={0x3, 0x0, 0x200}, @mss={0x2, 0xb6f1}, @sack_perm, @timestamp, @window={0x3, 0x2, 0x800}, @sack_perm, @timestamp], 0x8) read$FUSE(r0, &(0x7f00000011c0)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') 3.795103042s ago: executing program 5 (id=7965): syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) write$vga_arbiter(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1b) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000480)='R', 0x1}, {0x0}], 0x2) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008f04"]) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000080)=0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 3.445431482s ago: executing program 4 (id=7966): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x20) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800000000000000000000b7080000000000007baa00fe000000"], 0x0, 0x3}, 0x94) 2.026286443s ago: executing program 4 (id=7967): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2000b0e2ee"], 0x6e}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x400, 0x0, 0xfffffdfc}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) epoll_create(0xfff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x1ff, 0x2) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=r2], 0x20) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f00000001c0)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000000140)=0x6}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x7, 0x0, 0x20000000180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.88622996s ago: executing program 0 (id=7968): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000055aaffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.746530249s ago: executing program 6 (id=7969): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) (async) syz_usb_connect$cdc_ncm(0x7, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x1, 0xa0, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfff0}, {0xd, 0x24, 0xf, 0x1, 0x535, 0x200, 0x6c1, 0x5}, {0x6, 0x24, 0x1a, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x69, 0xff}}}}}}}]}}, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000100), 0xf9ba, 0x28540) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x3b0, 0x3a8, 0x3a8, 0x3b0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0xff000000], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x73, 0x0, 0x2}, 0x0, 0x228, 0x248, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x60, 0x0, 0x2f7d5cc6, 0xffdffffa, 0x6, 0x2, 0xb0, 0x68}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@frag={{0x30}, {[0x1, 0x5], 0x40, 0x5, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x7, 0x6e9a, 0x101, 'pptp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='1cpu'], 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) (async) r8 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r8, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) (async) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async) ioctl$RTC_WKALM_SET(r2, 0x541b, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00>\x00\x00\x00']) (async) syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x20e080, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB=',group_id=', @ANYBLOB=',max_read=0x000000000000aa0b,allow_other,allow_other,blksize=0x0000000000001400,max_read=0x0000000000000ecc,fsname=/dev/sg#\x00,uid<', @ANYRESDEC=0xee00, @ANYBLOB=',subj_osixacl,\x00'/27], 0x0, 0x0, &(0x7f0000000740)="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") (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) 1.475699926s ago: executing program 4 (id=7970): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) socket(0x840000000002, 0x3, 0xfa) (async) r2 = socket(0x840000000002, 0x3, 0xfa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345}) r3 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x9, 0x0, 0x0, 0x6}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x21, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r8, &(0x7f0000004440)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000380)="a91c384dc8eb29bd9f6e1089235c8016120961f7d9110f5f83e98d78baef07f35c6a40b642a3fa78ceec676b57283148ddb0756fc143fb420d3f0dd29264e4e76513420bfb113c73ae13c6022ab8c5dd1f9b0e293449bd175d4bf8bdbc16c781445ef28cb4c64d891549b06dd383c2b84ac4f4", 0x73}, {&(0x7f0000001480)="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", 0x1000}], 0x2, &(0x7f0000000500)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r7, r6, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r8, r7, r1, r1, r0, r1, r2]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x28, 0x1, 0x1, [r6, r3, r2, r2, r3, r7]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, r8, r3]}}], 0xd8, 0x4}}, {{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000006c0)="b99067b0a3c7c0f70cfe45f954112467bdfdcbae74e800893d42771234e75c", 0x1f}, {&(0x7f0000000700)="7b7417b16530b465daa39ab414f58dff623152c01cc29c458b4b", 0x1a}], 0x2, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r6]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x24, 0x1, 0x1, [r8, r2, 0xffffffffffffffff, r1, r7]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r6, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108, 0x4000000}}, {{&(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000980)="07349d1d112189627d5a371d8315c57c5e892d852293ebb0850ccce16c5dab8e03a301a971e4c99bc09497622f7954ffcd287b68a80c084b0edc2e80ed46fa2b6db60bac29531e811a29c4948376beb8b76bd0ae42926301f5c98daff1fa43f4642e5f86f883f2145cb5a60c988f8079e9e11d219b4b6b3e829ff486c821333d3e3a89dc1817c610c40c239f9a668479c140690fb48e1a772a3d7dcb3c", 0x9d}, {&(0x7f0000000a40)="6780e9aa4da67115762fc2391124c8574423d9db4efe13837458a6d8ffe46ade60329f296721ebcc365bbb906a502cc75fd5e45eb032b173dc0262e866622055c784a57f9101879092273fce91bf21bc753be7de61865fb114fcff9622ddb1af2853d099ac406236d28eafb5314d67eb506cfed2d2da16f730aefb94e1874c8e71ac2dfbccf06c5d9e69aa39ba17baad45666f0df17ee48be4b155cec546c2f1bfa7db4f4900fa13dec953914381c77c269bc1ace21f860d7d9f5900d3381fd17abd6066", 0xc4}], 0x2, &(0x7f0000000e00)=[@rights={{0xcc, 0x1, 0x1, [r3]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0xffffffffffffff9d, 0x1, 0x2, {0x0, 0xee00}}}], 0x158, 0x4}}, {{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000043c0)=[{&(0x7f0000000f80)="c613c510b65fe01a5979f8c8b366", 0xe}, {&(0x7f00000011c0)="0c935c088f9e8d7536807d540fbe2aa9ddcc69dfda8a66ac418e85c6fe74ad73c756c1518ca70b3f2d4817a96e33234198fc5c11eef198cc967549a2833f5da52b78fca5ad0e62211cf2531dbe6ea952dd0cce5b137568e8983db8557eedba9dbc112e5d56d1edcf4e102d85cdcf70045a1ece66ab4ee39583a5c926e2fc3c2aaf3841ad77228d5566e3eda2c5d12eace6fa2011e98ae8403708762dca4ac2ed48fb13bd6f4e9cee475784d744d29a3cd0c01831cd7e5b4920c2a1da89dfb3aa239af5084c9d2f16", 0xc8}, {&(0x7f00000041c0)="10880616edd205d6dc18f8a0bb43943d3c6ebf6a29d39346ffae03613930f7858bcb9d118173d987d835d6cdc544f6460e3893047e3c72b168cf7d5853de646fc055433745784744b846d33cf2a1d023790286f638d4d95a6e11462af2265ef4b6255b7efbcb8e21eb0fb31ec91f923701348a1f58b5c6a813208adfef8005b1f9390eec4208de2a60ee4b73c448421ddcc0cfe20ff75a0d7757010fcb25de40a9144b024234e69a3d5c66c498cd070eb6d5d10c4f5814a21e0eb0c68a2e626f35b51ca5b0bfa02773fa008a014edd5eda52d0", 0xd3}, {&(0x7f00000010c0)="80d913d043228877dcabcc425dc0fd62750939c231a2566fcc6917630852ff0e1faa7036474ad169644c13272d1d9b13835ce9417b075578bbfad1dc584a843270773bbd003a37021b0ebdd90c733f94fbf93a6ca04cf8be54af686d5607284b394ec77f528bb1556c44d81129e0fe2beaf92879a40027b9f496d4", 0x7b}, {&(0x7f00000012c0)="93ea7f8bfacfbb342182e0ffaed9b5201f4b07119a0ee1e8d4ea3ce54fd78b82b5ba90a072741bf924b2c6cc45e74351331ec67c07f33ae359e748b91853cfd7f8d664e6b9ff7cc0a944c6972c9aea78bfdc6139e802bead515aaaa53f1d", 0x5e}, {&(0x7f00000042c0)="99f53826e567a5f1e0e4b07de9f913a54cb4269010a67d5d007805f27413c2d129bb45d5815d21a6f4a2fb1d49fc23aeb049dcec88382cbac52f3129b9fcfb7d0f90d35f0baf00f0669d5137e7d30dad1ddc8556bf1addce76338a2f106357cdd35431d30bced16e38665ec0a30b05307e538160c5a641723f7849d9079cf9bc3ba7b96988098f944f432cf33a0893d8e8636a1b45da9cac73f646cdb8c4d4039920f246c6a9bb630b8d051fda17fe3198c05ba3f2707678b6c01d6e6d44dff4b39207c09d701b18cb6f", 0xca}], 0x6, &(0x7f0000001140)=[@cred={{0x1c}}], 0x20, 0x4000011}}], 0x4, 0x20040802) socket$igmp6(0xa, 0x3, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001114100026bd7000fcdbdf25080003000300000008004f000400000008004f000000000008004b002800000008004b0000000000080003000400000008004a00008000000800010001000000"], 0x50}, 0x1, 0x0, 0x0, 0x40400c5}, 0x5) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x4}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_open_dev$sndmidi(0x0, 0x2, 0x141581) r10 = dup(0xffffffffffffffff) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) r11 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$DRM_IOCTL_GET_MAP(r10, 0xc0286404, &(0x7f0000000140)={&(0x7f0000329000/0x4000)=nil}) ioctl$VIDIOC_S_INPUT(r11, 0xc0045627, &(0x7f0000000100)=0x3) (async) ioctl$VIDIOC_S_INPUT(r11, 0xc0045627, &(0x7f0000000100)=0x3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 1.302233228s ago: executing program 0 (id=7971): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x9) (async) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xc0, 0xa}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xaece, 0x0) preadv(r5, &(0x7f0000000540)=[{&(0x7f0000001dc0)=""/4088, 0xff8}], 0x1, 0xa2, 0x400004) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0xb, 0x1}) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r8 = dup3(r7, r6, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r10 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000019000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000002a8598f80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000003300000000000000fc010000000000000000000000000000000000000500"/244], 0x13c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000fffd000000000a00000029000000", @ANYRESOCT=r9, @ANYRESDEC=r5, @ANYBLOB="0100000000000000000000bf1cf94b0001000000010000000000000000000000000000000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200800000000000000fffffffffffffffffeffffff010000020000000000000000", @ANYRESOCT=r4, @ANYRESDEC=r10, @ANYRESDEC=r10, @ANYRES8=r10, @ANYRESDEC=r7], 0xb8}, 0x1, 0x0, 0x0, 0x4040001}, 0x4004) (async) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRESDEC=r11, @ANYRES16=r1, @ANYRESOCT=r0], 0xb8}}, 0x4010840) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$SIOCGETSGCNT(r8, 0x89e1, &(0x7f00000000c0)={@rand_addr=0x64010102, @rand_addr=0x64010102}) (async) r12 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x10a, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x38}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) r13 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r13, 0x40045532, 0x0) (async) syz_io_uring_setup(0xf6, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x3, 0x2e6}, &(0x7f0000000040), &(0x7f0000000080)) 1.096420768s ago: executing program 5 (id=7972): keyctl$clear(0x3, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) (async, rerun: 64) listen(r0, 0x0) (rerun: 64) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) (async) syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02"], 0x0) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1"], 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket(0x25, 0x3, 0x0) (async) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) shmctl$SHM_STAT(0x0, 0xd, 0x0) (async) r4 = memfd_create(&(0x7f0000000e40)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\x06\x00\x00\x00]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1a-\xc8\xdb\xdf.\x1b\xa7\xf2\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xe8f\xb4\xf8\x0eY\xea\xed\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06O\x99\xc7A*\x0f\x00\x97[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3\xe1\x01\x00\x00\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1Pc\xa3y\xca\xd6\xb5\xdeq\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\x00\x00\x00\x00\x00\x00\x00\a1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcbB\x1b\x8b6\xca\x8d\xabf\fqA\xdf\x94\xe5\xe5#\xf0\x1c\xf9f`\xbf\x8c\xbbA\xbb\x8fz\xcc\xd8dp\xf2\xc3\xa6C\x81?\xdf\xca-\xe6\x12zl\xe2\x88\t\x8b\xbd\xce\x1b\xdad\xadd\x91,O\x02\xf0\x19#j\vq\xb6#d\xc4\x8e^g\xfd\xbdQO\xa4\x06\xb6\xaeN/\x92\xc7\x8e\x9c\a8\x13\x0eW\x1a\x1b\x88#\xbbD\xa1\x19\xa7w\xe5Vv\xb5\xe3\xe6\x16^\rB\xbd\xaf\xa5hb\xf6/\xf9\xeaC\xb8\x0eF\xb9|rS\xe7o\xfb\xa2\x0e\xdf\xee\xe4\xce\xfa\xe2W5o}U\xff\x05LQt\x8a\x04\x1fC\t\xa2\xb0\x11\xa7\x98\xd0\xd2\x90\x00'/846, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x804802, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000, 0x4}) ftruncate(r4, 0x8000000000009) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) sendfile(r4, r4, 0x0, 0x200001) (async, rerun: 64) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xe) (async) ioctl$TCFLSH(r8, 0x540b, 0xfffffffffffeffff) (async) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7}, 0x1c) (async) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYBLOB="36cb16db8f37774a6e4906c1743fcbc84b898622ca637e96dfdd43f7a1797819e318c48fb56c7f2c0ff09b728319a37cf6f35a233b3ed5606cdb48c56a5c13aa2399117827db33e427afa2e200e21a69d75312e57304c52bfa7aa24fc8a5681a431a040fe368e44c5b2663b47d018b0ecbc5a1c3d61d5b6b5ac5328c88c9eace8e4184f984d02a6426d81738442897e728cfe95e42fa32fb5327801aa52e2054ae75c0a36c5d00d3dc1d38e2a465001d77ddc7aa", @ANYRES8=r4], 0x28}}, 0x0) 1.022473173s ago: executing program 6 (id=7973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4844}, 0x4800) 898.704187ms ago: executing program 6 (id=7974): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffe}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth1_virt_wifi\x00'}) syz_usb_connect(0x2, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b8db3008720541005470012207010902740001000040000904"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x8000000004) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000040050b6d18000000000001090224008609000020070904000000de97f4ea090581030000000000c018dbfea0ada508887cc73972c19dcd29"], 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYRES64=r6, @ANYRES32=r4, @ANYRESHEX=r6], 0x20) mq_unlink(&(0x7f0000000040)='\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000096500000000000000000000f42bd242897a000036baaed8f00e8d961b657a8c059e7ae6b747494096f3bf548967260bb59e19d0bde18c317f7c1d720d082da12ede911d0b62232c8c4476433103f510517e2fe3dc6cb07f015265de30764fc3befef8da0821f4cdfccb62a8de1cb48d1a4672c5842231e883516e3720c29061dceb3e169437622a95f8f352f8743ed1cfaef45354d08339b644e6f726f847bb2a6f222f8c00190ba3c5aed0417f2d6c97a624068bbe7a880374956c2d62bc3316936d4e0461fc", @ANYRES32=r7, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500010000000000"], 0x44}}, 0x0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000480)={&(0x7f0000000440)=[{0x7ed, 0x8010, 0x99, &(0x7f00000002c0)="be4207620ef81ec3b2253bbeec142402ce2ebc4991173c941538f3076ae7cb89fa94067bb61b809d1de8d7629d64cbb904e104a79c2e263b5781dea7585c22e2204fc7bc967bf26062bfe6bbfe52423a3e04ef0c4e5232732873e02e9777dabcdf593e40df62255274a3cac465680ff2f897cbb49310b58046174947fcdcbd9ec3b4cd832cea00c56511350a319bf1cf272e610915fc7b4f9a"}, {0x2, 0x4611, 0x8f, &(0x7f0000000380)="d8ce6df2e242e95207cd338852a77d30eb96171ec70982bdf998ff6de51d90da97e15bcb1e3751d090ecb55626636c75a345d4992ffd6c9aab39646ca0e5781d1b3b8d01f7892ed85fb96453718ceaf848408dc46c9458751e8091ca3eb1a796439058eb435ff46fbedabd14f463ceded9260955d5896f6b7b8c37077395853601fe8581adc56acaee1c996411701f"}], 0x2}) 842.979851ms ago: executing program 0 (id=7975): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x30, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x8, 0x0, 0x9}, {0x6, 0x24, 0x1a, 0x0, 0x38}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff, 0x9, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x34, 0x80, 0x6}}}}}}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000080)="0a691e9e080143b1a3cd99c4797394c3267a44de2ffaeddf4f2b32563b0bba80eacaab4c1f234ae5faf001f314bc82e603a8e518202c27d588644c6e7346f78dc978a9ac9f59a8bb43525c38c04d5520c7f30c708662aec1f31ae044d32054c9ad87bb1409") syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2840010300000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2840010300000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 778.209893ms ago: executing program 2 (id=7976): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) fcntl$setstatus(r5, 0x4, 0x800) waitid$P_PIDFD(0x3, r5, 0x0, 0x8, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x2}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000000)={0x3, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000f80)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r10}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x3f, &(0x7f00000005c0)=[{&(0x7f0000000080)="262d965502193e3dfdd32ecf7d8ab61073a2edb945bbf30e197e595969af3e8fb52a512b58cb8039ec5763c97f5e7af09b2f43849683c81c188be40d0aa4a5f472bd719354c381cc9ce2e0e5039d48546636502eada5b85b1d9332b99069af5776ec84c3a3dd09b5556bc4a355c20d3abe74874f09032eee08bf105bbb2237fbe5f067a2428bd376c7f78afffd207d601baeaf596b13e8da58ccefb9bc938e700828c4fa9e5ccd7910f19b8a8d3c260f337c16d1bf6475eb13b074b3be72063e2e34d73dff7c30da1cff48c2ab8eb0f321814a8b8206d0", 0xd7}, {&(0x7f0000000000)="bccf62b08dbccd11ff", 0x9}, {&(0x7f0000000180)="6af354ee5b2aa7e811effe701aec9389e039e55a3973a217a486796deeb8b1dfd86b36ee215b26847b9f26502d5965ecf001e7ac268b7c930af24097757c97adbd52e5c29562928362ac1f039dd20049ad5a012aa573f82b024475fb666e02da7ca221ba9c08de16aebd2fb8bb6ef77e1ceee6741a3b347b8055d4d842fd5c4d48b396c1b78900916bf3e890a49cff2cdba7633b5e3c7ce75ae975603a1113738c", 0xa1}, {&(0x7f0000000240)="91a3a6f64ea4c24551ccabc26d7a27731fd9e2a2313dca6839c4e929e21565a0a3d0c1714af1562dbe4681b88878ed87a37fa2952a2e2814ca344dc64833cb7c3776db7153124f21be39a1f22321161db3b2b868212bfd7259c2d030a68f73bf3b9d0ef026e7302ae027f4286aac469533cb1fa804caf3e04d9772edc27100e4dce67d030d58dce08b00f0505345c82775e2f5d43e9f67838f1b2b5876eed7a2b73748bfa541b82ba8fa4f6b3c41a3d0acd0032daa005e0ce259a3", 0xbb}, {&(0x7f0000000300)="1ce9af8f0cb9255e6cf84f6cfac2df649afa9612a903eed4ebc50ebd8836bb19c2144398c6ea8bf4f8c29288b9505b6231ef1b20383e21201d39bbfd677f65c8ffc605de9af6d8f618b9e5d194dc8fa53f88c99b484beb", 0x57}, {&(0x7f00000004c0)="d9a58f2d085f31850b8e09050b5923772bf797741b96e66aa28400b99759343971c8c0dedaf062238b6edee4b12af941afd0e8a3b063d4387c92d239a2177caae3992ca67509b1982a4c102622104a0980cad2b1df9b2a6ee6ac8887488e00134c205d9793d70ecee090754f455b25584da4414bc7a60b4bc80ae51203b6f0e8edad4f5dc1e7012ee10be8b3657491cc75f052a8f1b3603fad5d0a19d459227e7df5eb30c0e7dcec35bf3aad2a738ac7d1a812332dfe8596527acef1bc25d625a50ee09a73bea33598565a83ece0d694cf9a6fe7abd5d0ba6e91a4a87a04a41cc379b5c970", 0x10e}, {&(0x7f00000003c0)="dcd7f299136d3802b6c400c47469ea19a11db1d336c93cdaacccc4d5b90bfe5b6279f8309d602e0ff5257e83c2a27b9ee11fc00745b8384609b10cfce7d8d52174979b5884423c8cb31e8a7d212a6f4510ea2071a6c86020b20e1221fc8cbbf793721ae8d67c7353b7dd8b9bba5e9130fffa54b9151da87079f975e284a38ab1555c51a6b0409ecc5ab0004cd32d1652bc56bd9725a21524181f73aa7837a3c6e8a0c02cd0dccb8c6e3f293576a34024c752ada49bea4024bb0cbc4715d967f3a439fd099d3a4df17f27e7ac117fb15fdb91a8b2f6091b781da2d024ac1b757d20478d9ef880cb6fb719f334b2551bc160215a", 0xf3}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000780)="77ef8eff32d11943eea6e09c984649e2c17747c430590d857f7de8e7b8307e54836f4ad099d55e387aff53047493a51371b5edb7cf709fff323a6a7a8eb75cce3ca7360c3b8f63f552262d3aace1a394024260c1563174e04c113effd3451ba45158eb730dac96915e4becbf7da043ab63edcc920fe22378e9955caa408df8c3a38992d1c5d20900012af657677e97aa810a0ebdad9e33dfd1b89808befd44664cd4c0034af303e8450b25526bf8f70cc2467cf6a030771d4cadf3daf7f7cdc801f64238f5d7a2c8d603b385604eb5f00d00fa85a33d828cc52a82e5de54f679e7ce2c7549e7d0394f5d8a25f58327e93ef7cac7f4495cbbd6d21c2a26d706833027165b67d389c94c727ed3bfd3ef213708271ebf932f97dcad21999cdf6be96fcee68348e6087a03d4954237583a9e526fe0cc6f037a3740f5294ee1bc5d6078", 0x141}], 0x9, 0x0, 0x0, 0x7400}, 0x800) 664.967819ms ago: executing program 4 (id=7977): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x20) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800000000000000000000b7080000000000007baa00fe000000"], 0x0, 0x3}, 0x94) 0s ago: executing program 5 (id=7978): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000040), 0x2, 0x0, 0xcccccccc}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = getpid() syz_pidfd_open(r2, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) kernel console output (not intermixed with test programs): erface number 0 [ 2270.663720][ T10] usb 6-1: config 255 interface 154 has no altsetting 0 [ 2270.687351][ T10] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=9a.6f [ 2270.705111][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.728965][ T10] usb 6-1: Product: syz [ 2270.740087][ T10] usb 6-1: Manufacturer: syz [ 2270.751761][ T10] usb 6-1: SerialNumber: syz [ 2271.133597][ T2842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2271.143314][ T2842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2271.189180][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2271.411098][ T10] usb 6-1: USB disconnect, device number 89 [ 2271.497712][T31180] udevd[31180]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:255.154/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2271.849800][ T2858] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7612'. [ 2271.955007][T24982] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2272.078111][ T2865] IPVS: set_ctl: invalid protocol: 2 172.30.0.6:20003 [ 2272.085530][ T2865] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7611'. [ 2272.101156][ T2865] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7611'. [ 2272.112623][ T2862] binder: 2861:2862 ioctl c0306201 2000000003c0 returned -14 [ 2272.294648][T24982] usb 5-1: Using ep0 maxpacket: 8 [ 2272.466852][T24982] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2272.499826][T24982] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2272.527192][T24982] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2272.548281][T24982] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2272.572451][T24982] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2272.631091][T24982] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2272.641468][T24982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2272.684645][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2272.850996][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2272.863773][ T2884] netlink: 596 bytes leftover after parsing attributes in process `syz.5.7619'. [ 2272.883596][T24982] usb 5-1: GET_CAPABILITIES returned 0 [ 2272.893308][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2272.913642][T24982] usbtmc 5-1:16.0: can't read capabilities [ 2272.935090][ T10] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2272.949094][ T2884] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7619'. [ 2272.958357][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2272.987541][ T10] usb 7-1: config 0 descriptor?? [ 2273.000270][ T2887] netlink: 'syz.5.7619': attribute type 10 has an invalid length. [ 2273.015619][ T2887] bridge_slave_1: left allmulticast mode [ 2273.026595][ T2884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7619'. [ 2273.036491][ T2887] bridge_slave_1: left promiscuous mode [ 2273.036777][ T2887] bridge0: port 2(bridge_slave_1) entered disabled state [ 2273.068988][ T2884] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7619'. [ 2273.087494][T24975] usb 5-1: USB disconnect, device number 101 [ 2273.430021][ T10] steelseries 0003:1038:12B6.0075: unbalanced delimiter at end of report description [ 2273.465661][ T10] steelseries 0003:1038:12B6.0075: probe with driver steelseries failed with error -22 [ 2273.618932][T24982] usb 7-1: USB disconnect, device number 13 [ 2273.700799][ T2896] loop6: detected capacity change from 0 to 7 [ 2273.739382][ T2896] Dev loop6: unable to read RDB block 7 [ 2273.751465][ T2896] loop6: unable to read partition table [ 2273.770432][ T2896] loop6: partition table beyond EOD, truncated [ 2273.784590][ T2896] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 2273.904270][ T2898] loop6: detected capacity change from 0 to 7 [ 2273.931522][T31871] Dev loop6: unable to read RDB block 7 [ 2273.939446][T31871] loop6: AHDI p1 p2 p3 p4 [ 2273.974574][T31871] loop6: partition table partially beyond EOD, truncated [ 2274.016889][T31871] loop6: p1 start 926365495 is beyond EOD, truncated [ 2274.169792][T31871] loop6: p2 size 47 extends beyond EOD, truncated [ 2274.188109][ T2902] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7624'. [ 2274.195183][T31871] loop6: p3 start 1886353253 is beyond EOD, truncated [ 2274.219052][ T2898] Dev loop6: unable to read RDB block 7 [ 2274.224954][ T2898] loop6: AHDI p1 p2 p3 p4 [ 2274.238329][ T2898] loop6: partition table partially beyond EOD, truncated [ 2274.275014][ T2898] loop6: p1 start 926365495 is beyond EOD, truncated [ 2274.294954][ T2898] loop6: p2 size 47 extends beyond EOD, truncated [ 2274.329054][ T2898] loop6: p3 start 1886353253 is beyond EOD, truncated [ 2274.497613][T31871] udevd[31871]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 2274.562942][ T2886] syz.0.7618 (2886): drop_caches: 1 [ 2274.599657][T31871] udevd[31871]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 2274.694680][T24975] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2274.716212][T17247] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2274.743171][ T2908] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 2274.844959][T24975] usb 3-1: Using ep0 maxpacket: 16 [ 2274.866901][T24975] usb 3-1: config 2 has an invalid interface number: 4 but max is 0 [ 2274.887866][T17247] usb 7-1: Using ep0 maxpacket: 16 [ 2274.905223][T24975] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2274.935237][T17247] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2274.957211][T24975] usb 3-1: config 2 has no interface number 0 [ 2274.963531][T17247] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2274.985155][T24975] usb 3-1: config 2 interface 4 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2275.015072][T24975] usb 3-1: config 2 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2275.028556][T17247] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2275.045739][T17247] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2275.065074][T24975] usb 3-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da [ 2275.076715][T24975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2275.097404][T17247] usb 7-1: config 0 descriptor?? [ 2275.114341][T24975] usb 3-1: Product: syz [ 2275.126153][T24975] usb 3-1: Manufacturer: syz [ 2275.141212][T24975] usb 3-1: SerialNumber: syz [ 2275.172418][T24975] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2275.246040][T24975] snd-usb-audio 3-1:2.4: probe with driver snd-usb-audio failed with error -2 [ 2275.350526][T31871] udevd[31871]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2275.366674][T24975] usb 3-1: USB disconnect, device number 12 [ 2275.510196][ T2906] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7625'. [ 2275.540618][T17247] microsoft 0003:045E:07DA.0076: unknown main item tag 0x1 [ 2275.564687][T17247] microsoft 0003:045E:07DA.0076: unknown main item tag 0x7 [ 2275.592325][T17247] microsoft 0003:045E:07DA.0076: item fetching failed at offset 32/34 [ 2275.621937][T17247] microsoft 0003:045E:07DA.0076: parse failed [ 2275.635112][T17247] microsoft 0003:045E:07DA.0076: probe with driver microsoft failed with error -22 [ 2275.746517][ T2906] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7625'. [ 2275.972522][ T2926] netlink: 'syz.4.7632': attribute type 1 has an invalid length. [ 2276.715094][ T2938] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 2276.764913][T24971] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2276.934616][T24971] usb 3-1: Using ep0 maxpacket: 32 [ 2276.949743][T24971] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 2276.970892][T24971] usb 3-1: config 0 has no interface number 0 [ 2277.004119][T24971] usb 3-1: config 0 interface 12 has no altsetting 0 [ 2277.031149][T24971] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2277.057105][T24971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2277.076306][T24971] usb 3-1: Product: syz [ 2277.082867][T24971] usb 3-1: Manufacturer: syz [ 2277.092138][T24971] usb 3-1: SerialNumber: syz [ 2277.109698][T24971] usb 3-1: config 0 descriptor?? [ 2277.847334][T24982] usb 7-1: USB disconnect, device number 14 [ 2277.999354][ T2960] FAULT_INJECTION: forcing a failure. [ 2277.999354][ T2960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2278.013046][ T2960] CPU: 1 UID: 0 PID: 2960 Comm: syz.6.7642 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 2278.013070][ T2960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2278.013081][ T2960] Call Trace: [ 2278.013089][ T2960] [ 2278.013098][ T2960] dump_stack_lvl+0x189/0x250 [ 2278.013126][ T2960] ? __pfx____ratelimit+0x10/0x10 [ 2278.013150][ T2960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2278.013174][ T2960] ? __pfx__printk+0x10/0x10 [ 2278.013204][ T2960] should_fail_ex+0x414/0x560 [ 2278.013229][ T2960] _copy_to_user+0x31/0xb0 [ 2278.013247][ T2960] pagemap_read+0x4d4/0x7b0 [ 2278.013274][ T2960] ? __pfx_pagemap_read+0x10/0x10 [ 2278.013297][ T2960] ? rw_verify_area+0x258/0x650 [ 2278.013320][ T2960] ? __pfx_pagemap_read+0x10/0x10 [ 2278.013337][ T2960] vfs_read+0x200/0x980 [ 2278.013369][ T2960] ? __pfx_vfs_read+0x10/0x10 [ 2278.013394][ T2960] ? __fget_files+0x2a/0x420 [ 2278.013415][ T2960] ? __fget_files+0x2a/0x420 [ 2278.013431][ T2960] ? __fget_files+0x3a0/0x420 [ 2278.013448][ T2960] ? __fget_files+0x2a/0x420 [ 2278.013475][ T2960] __x64_sys_pread64+0x193/0x220 [ 2278.013494][ T2960] ? __pfx___x64_sys_pread64+0x10/0x10 [ 2278.013509][ T2960] ? rcu_is_watching+0x15/0xb0 [ 2278.013538][ T2960] ? do_syscall_64+0xbe/0x3b0 [ 2278.013565][ T2960] do_syscall_64+0xfa/0x3b0 [ 2278.013587][ T2960] ? lockdep_hardirqs_on+0x9c/0x150 [ 2278.013608][ T2960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2278.013625][ T2960] ? clear_bhb_loop+0x60/0xb0 [ 2278.013646][ T2960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2278.013662][ T2960] RIP: 0033:0x7f0a6f58e929 [ 2278.013678][ T2960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2278.013694][ T2960] RSP: 002b:00007f0a703a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2278.013713][ T2960] RAX: ffffffffffffffda RBX: 00007f0a6f7b5fa0 RCX: 00007f0a6f58e929 [ 2278.013726][ T2960] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000003 [ 2278.013737][ T2960] RBP: 00007f0a703a5090 R08: 0000000000000000 R09: 0000000000000000 [ 2278.013748][ T2960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2278.013759][ T2960] R13: 0000000000000000 R14: 00007f0a6f7b5fa0 R15: 00007f0a6f8dfa28 [ 2278.013787][ T2960] [ 2278.320738][ T2962] fuse: Bad value for 'user_id' [ 2278.364671][ T2962] fuse: Bad value for 'user_id' [ 2278.376131][ T2940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2278.392558][ T2940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2279.742657][T24971] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 2279.753621][T24971] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 2280.345968][T24971] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2280.600728][T24971] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 2280.660877][T24971] usb 3-1: USB disconnect, device number 13 [ 2281.575650][ T3001] ptrace attach of "./syz-executor exec"[27035] was attempted by "./syz-executor exec"[3001] [ 2282.075683][T24971] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2282.234914][T24971] usb 5-1: Using ep0 maxpacket: 32 [ 2282.285041][T24971] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 2282.297862][T24971] usb 5-1: config 0 has no interface number 0 [ 2282.334943][T24971] usb 5-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 2282.355746][T24971] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 2282.366940][T24971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.390589][T24971] usb 5-1: Product: syz [ 2282.424170][T24971] usb 5-1: Manufacturer: syz [ 2282.444427][T24971] usb 5-1: SerialNumber: syz [ 2282.458704][T24971] usb 5-1: config 0 descriptor?? [ 2282.484094][ T3003] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2282.620326][ T3005] FAULT_INJECTION: forcing a failure. [ 2282.620326][ T3005] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2282.731264][ T3005] CPU: 0 UID: 0 PID: 3005 Comm: syz.6.7654 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 2282.731294][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2282.731305][ T3005] Call Trace: [ 2282.731313][ T3005] [ 2282.731321][ T3005] dump_stack_lvl+0x189/0x250 [ 2282.731349][ T3005] ? __pfx____ratelimit+0x10/0x10 [ 2282.731371][ T3005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2282.731392][ T3005] ? __pfx__printk+0x10/0x10 [ 2282.731409][ T3005] ? fs_reclaim_acquire+0x7d/0x100 [ 2282.731436][ T3005] should_fail_ex+0x414/0x560 [ 2282.731460][ T3005] prepare_alloc_pages+0x213/0x610 [ 2282.731486][ T3005] __alloc_frozen_pages_noprof+0x123/0x370 [ 2282.731510][ T3005] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2282.731538][ T3005] ? policy_nodemask+0x27c/0x720 [ 2282.731553][ T3005] ? __lock_acquire+0xab9/0xd20 [ 2282.731580][ T3005] alloc_pages_mpol+0x232/0x4a0 [ 2282.731603][ T3005] vma_alloc_folio_noprof+0xe4/0x200 [ 2282.731622][ T3005] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2282.731659][ T3005] folio_prealloc+0x30/0x180 [ 2282.731679][ T3005] __handle_mm_fault+0x2c88/0x5620 [ 2282.731723][ T3005] ? __pfx___handle_mm_fault+0x10/0x10 [ 2282.731764][ T3005] ? find_vma+0xe7/0x160 [ 2282.731779][ T3005] ? __pfx_find_vma+0x10/0x10 [ 2282.731799][ T3005] handle_mm_fault+0x40a/0x8e0 [ 2282.731833][ T3005] do_user_addr_fault+0x764/0x1390 [ 2282.731870][ T3005] exc_page_fault+0x76/0xf0 [ 2282.731895][ T3005] asm_exc_page_fault+0x26/0x30 [ 2282.731910][ T3005] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 2282.731931][ T3005] Code: 00 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 00 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 2282.731945][ T3005] RSP: 0018:ffffc900033c7b48 EFLAGS: 00050206 [ 2282.731961][ T3005] RAX: ffffffff84c1be01 RBX: 0000000000001000 RCX: 0000000000000240 [ 2282.731974][ T3005] RDX: 0000000000000000 RSI: ffff888050486dc0 RDI: 000020000000a000 [ 2282.731986][ T3005] RBP: ffffc900033c7c90 R08: ffff888050486fff R09: 1ffff1100a090dff [ 2282.731999][ T3005] R10: dffffc0000000000 R11: ffffed100a090e00 R12: 000020000000a240 [ 2282.732016][ T3005] R13: 00007ffffffff000 R14: ffff888050486000 R15: 0000200000009240 [ 2282.732037][ T3005] ? _copy_to_user+0x31/0xb0 [ 2282.732060][ T3005] _copy_to_user+0x8a/0xb0 [ 2282.732078][ T3005] pagemap_read+0x4d4/0x7b0 [ 2282.732105][ T3005] ? __pfx_pagemap_read+0x10/0x10 [ 2282.732129][ T3005] ? rw_verify_area+0x258/0x650 [ 2282.732150][ T3005] ? __pfx_pagemap_read+0x10/0x10 [ 2282.732169][ T3005] vfs_read+0x200/0x980 [ 2282.732201][ T3005] ? __pfx_vfs_read+0x10/0x10 [ 2282.732225][ T3005] ? __fget_files+0x2a/0x420 [ 2282.732247][ T3005] ? __fget_files+0x2a/0x420 [ 2282.732263][ T3005] ? __fget_files+0x3a0/0x420 [ 2282.732279][ T3005] ? __fget_files+0x2a/0x420 [ 2282.732304][ T3005] __x64_sys_pread64+0x193/0x220 [ 2282.732322][ T3005] ? __pfx___x64_sys_pread64+0x10/0x10 [ 2282.732343][ T3005] ? do_syscall_64+0xbe/0x3b0 [ 2282.732368][ T3005] do_syscall_64+0xfa/0x3b0 [ 2282.732391][ T3005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2282.732407][ T3005] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2282.732423][ T3005] ? clear_bhb_loop+0x60/0xb0 [ 2282.732444][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2282.732459][ T3005] RIP: 0033:0x7f0a6f58e929 [ 2282.732473][ T3005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2282.732488][ T3005] RSP: 002b:00007f0a703a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2282.732505][ T3005] RAX: ffffffffffffffda RBX: 00007f0a6f7b5fa0 RCX: 00007f0a6f58e929 [ 2282.732519][ T3005] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000003 [ 2282.732530][ T3005] RBP: 00007f0a703a5090 R08: 0000000000000000 R09: 0000000000000000 [ 2282.732541][ T3005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2282.732551][ T3005] R13: 0000000000000000 R14: 00007f0a6f7b5fa0 R15: 00007f0a6f8dfa28 [ 2282.732580][ T3005] [ 2283.177384][ T3003] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2283.406605][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.412952][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.465647][T24971] net1080 5-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.4-1, NetChip TurboCONNECT, b2:be:40:61:f6:d4 [ 2283.614635][ T10] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 2283.642262][ T3008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2283.656693][ T3008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2283.764708][ T10] usb 3-1: device descriptor read/64, error -71 [ 2283.978532][T17247] usb 5-1: USB disconnect, device number 102 [ 2283.989950][T17247] net1080 5-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.4-1, NetChip TurboCONNECT [ 2284.004672][ T10] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 2284.144878][ T10] usb 3-1: device descriptor read/64, error -71 [ 2284.275171][ T10] usb usb3-port1: attempt power cycle [ 2284.430828][ T3018] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 2284.665593][ T30] audit: type=1326 audit(1751265117.768:9490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060318e929 code=0x7ffc0000 [ 2284.968579][ T30] audit: type=1326 audit(1751265117.768:9491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060318e929 code=0x7ffc0000 [ 2285.045210][ T3028] ptrace attach of "./syz-executor exec"[2151] was attempted by "./syz-executor exec"[3028] [ 2285.055559][ T10] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 2285.130870][ T10] usb 3-1: device descriptor read/8, error -71 [ 2285.154632][ T30] audit: type=1326 audit(1751265117.768:9492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f060318e929 code=0x7ffc0000 [ 2285.222856][ T30] audit: type=1326 audit(1751265117.768:9493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060318e929 code=0x7ffc0000 [ 2285.366412][ T30] audit: type=1326 audit(1751265117.768:9494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060318e929 code=0x7ffc0000 [ 2285.395318][ T10] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 2285.425623][ T10] usb 3-1: device descriptor read/8, error -71 [ 2285.524923][ T30] audit: type=1326 audit(1751265117.768:9495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f060318e929 code=0x7ffc0000 [ 2285.548296][ T30] audit: type=1326 audit(1751265117.768:9496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060318e929 code=0x7ffc0000 [ 2285.556341][ T10] usb usb3-port1: unable to enumerate USB device [ 2285.572525][ T30] audit: type=1326 audit(1751265117.768:9497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f060318e929 code=0x7ffc0000 [ 2285.604201][ T30] audit: type=1326 audit(1751265117.768:9498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060318e929 code=0x7ffc0000 [ 2285.644811][ T30] audit: type=1326 audit(1751265117.768:9499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f060318e929 code=0x7ffc0000 [ 2286.152475][ T3060] ptrace attach of "./syz-executor exec"[27035] was attempted by "./syz-executor exec"[3060] [ 2286.375070][T17247] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 2286.509369][ T3070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7669'. [ 2286.543588][T17247] usb 5-1: config 0 has an invalid interface number: 224 but max is 0 [ 2286.574400][T17247] usb 5-1: config 0 has an invalid descriptor of length 178, skipping remainder of the config [ 2286.614436][T17247] usb 5-1: config 0 has no interface number 0 [ 2286.646576][T17247] usb 5-1: config 0 interface 224 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 2286.817466][T17247] usb 5-1: config 0 interface 224 altsetting 0 endpoint 0x88 has invalid maxpacket 6939, setting to 64 [ 2286.878325][T17247] usb 5-1: config 0 interface 224 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 2286.932186][T17247] usb 5-1: config 0 interface 224 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 2286.990218][T17247] usb 5-1: config 0 interface 224 altsetting 0 endpoint 0x6 has invalid maxpacket 4932, setting to 64 [ 2287.002307][T17247] usb 5-1: config 0 interface 224 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 2287.027725][T17247] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=69.a8 [ 2287.044746][T17247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2287.053009][T17247] usb 5-1: Product: syz [ 2287.084975][T17247] usb 5-1: Manufacturer: syz [ 2287.093540][T17247] usb 5-1: SerialNumber: syz [ 2287.114355][T17247] usb 5-1: config 0 descriptor?? [ 2287.140616][ T10] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 2287.145846][ T3055] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2287.171503][ T3055] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2287.195138][ T3055] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2287.215979][T17247] plusb 5-1:0.224: probe with driver plusb failed with error -22 [ 2287.329811][ T10] usb 7-1: config 0 has an invalid descriptor of length 63, skipping remainder of the config [ 2287.393675][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2287.455212][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 2287.464327][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2287.604397][ T10] usb 7-1: config 0 descriptor?? [ 2287.834613][ T10] usb 7-1: string descriptor 0 read error: -71 [ 2287.851346][ T10] usb 7-1: USB disconnect, device number 15 [ 2287.971444][T24975] usb 5-1: USB disconnect, device number 103 [ 2288.077801][ T3098] loop6: detected capacity change from 0 to 7 [ 2288.217109][ T3098] Dev loop6: unable to read RDB block 7 [ 2288.264276][ T3098] loop6: unable to read partition table [ 2288.307095][ T3098] loop6: partition table beyond EOD, truncated [ 2288.369973][ T3098] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 2288.494431][ T3106] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7677'. [ 2289.015255][T24975] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 2289.188800][T24975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2289.199789][T24975] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2289.246896][T24975] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 2289.305208][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2289.327803][T24975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2289.348442][T24975] usb 5-1: Product: syz [ 2289.358173][T24975] usb 5-1: Manufacturer: syz [ 2289.375317][T24975] usb 5-1: SerialNumber: syz [ 2289.452306][T24975] usb 5-1: config 0 descriptor?? [ 2289.472072][T24975] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 2289.474923][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 2289.494000][T24975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2289.514429][T24975] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 2289.537658][T24975] usb 5-1: media controller created [ 2289.600948][T24975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2289.677238][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 2289.687237][ T3115] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 2289.705079][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2289.730453][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2289.760647][T24975] DVB: Unable to find symbol tda10046_attach() [ 2289.772370][T24975] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 2289.792807][T24975] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 2289.844607][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2289.931356][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2289.994866][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2290.029316][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2290.195795][ T3139] ptrace attach of "./syz-executor exec"[28578] was attempted by "./syz-executor exec"[3139] [ 2290.356993][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 2290.362546][ T10] usbtmc 7-1:16.0: can't read capabilities [ 2290.566990][ T10] usb 7-1: USB disconnect, device number 16 [ 2290.901273][T24975] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 2290.913394][T24975] usb 5-1: USB disconnect, device number 104 [ 2292.551313][ T3187] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7694'. [ 2292.592027][ T3186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2292.684687][ T5935] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2292.864967][ T5935] usb 7-1: Using ep0 maxpacket: 32 [ 2292.873074][ T5935] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2292.894741][ T5935] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2292.919364][ T5935] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2292.943330][ T5935] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2293.088405][ T5935] usb 7-1: config 0 descriptor?? [ 2293.109998][ T5935] hub 7-1:0.0: USB hub found [ 2293.204900][ T924] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2293.318147][ T5935] hub 7-1:0.0: 1 port detected [ 2293.347588][ T924] usb 3-1: device descriptor read/64, error -71 [ 2293.584686][ T924] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2293.726280][ T924] usb 3-1: device descriptor read/64, error -71 [ 2293.814947][ T10] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2293.845471][ T924] usb usb3-port1: attempt power cycle [ 2293.989097][ T10] usb 6-1: config 3 has an invalid interface number: 7 but max is 0 [ 2293.998847][ T10] usb 6-1: config 3 has no interface number 0 [ 2294.007818][ T10] usb 6-1: config 3 interface 7 altsetting 6 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 2294.019600][ T10] usb 6-1: config 3 interface 7 has no altsetting 0 [ 2294.029150][ T10] usb 6-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=3f.7b [ 2294.042579][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2294.051152][ T10] usb 6-1: Product: syz [ 2294.055892][ T10] usb 6-1: Manufacturer: syz [ 2294.060509][ T10] usb 6-1: SerialNumber: syz [ 2294.211942][ T924] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2294.238146][ T924] usb 3-1: device descriptor read/8, error -71 [ 2294.294771][ T10] radio-si470x 6-1:3.7: si470x_get_report: usb_control_msg returned -71 [ 2294.313855][ T10] radio-si470x 6-1:3.7: probe with driver radio-si470x failed with error -5 [ 2294.335216][ T3202] @: renamed from syz_tun (while UP) [ 2294.394821][ T10] usb 6-1: USB disconnect, device number 90 [ 2294.469870][T24975] usb 7-1: USB disconnect, device number 17 [ 2294.476138][ T5935] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 2294.497172][ T924] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2294.550324][ T924] usb 3-1: device descriptor read/8, error -71 [ 2294.675295][ T924] usb usb3-port1: unable to enumerate USB device [ 2294.844924][T24975] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2294.940132][ T3207] fuse: Unknown parameter '' [ 2295.017098][T24975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2295.051495][T24975] usb 7-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 2295.061143][T24975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2295.072008][T24975] usb 7-1: Product: syz [ 2295.077112][T24975] usb 7-1: Manufacturer: syz [ 2295.082008][T24975] usb 7-1: SerialNumber: syz [ 2295.101496][T24975] usb 7-1: config 0 descriptor?? [ 2295.116288][T24975] usbtouchscreen 7-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 2295.316671][ T3205] netlink: 172 bytes leftover after parsing attributes in process `syz.6.7699'. [ 2295.402871][ T3205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2295.435702][ T10] usb 7-1: USB disconnect, device number 18 [ 2295.522787][ T3212] ptrace attach of "./syz-executor exec"[28578] was attempted by "./syz-executor exec"[3212] [ 2295.893707][ T3215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7703'. [ 2296.655594][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2296.797528][ T10] usb 3-1: device descriptor read/64, error -71 [ 2297.050386][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2297.354822][ T10] usb 3-1: device descriptor read/64, error -71 [ 2297.475064][ T10] usb usb3-port1: attempt power cycle [ 2297.768624][ T3258] FAULT_INJECTION: forcing a failure. [ 2297.768624][ T3258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2297.785306][ T3258] CPU: 0 UID: 0 PID: 3258 Comm: syz.0.7713 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 2297.785332][ T3258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2297.785343][ T3258] Call Trace: [ 2297.785351][ T3258] [ 2297.785359][ T3258] dump_stack_lvl+0x189/0x250 [ 2297.785388][ T3258] ? __pfx____ratelimit+0x10/0x10 [ 2297.785409][ T3258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2297.785431][ T3258] ? __pfx__printk+0x10/0x10 [ 2297.785461][ T3258] should_fail_ex+0x414/0x560 [ 2297.785487][ T3258] _copy_to_user+0x31/0xb0 [ 2297.785505][ T3258] pagemap_read+0x4d4/0x7b0 [ 2297.785532][ T3258] ? __pfx_pagemap_read+0x10/0x10 [ 2297.785554][ T3258] ? rw_verify_area+0x258/0x650 [ 2297.785577][ T3258] ? __pfx_pagemap_read+0x10/0x10 [ 2297.785595][ T3258] vfs_read+0x200/0x980 [ 2297.785626][ T3258] ? __pfx_vfs_read+0x10/0x10 [ 2297.785651][ T3258] ? __fget_files+0x2a/0x420 [ 2297.785672][ T3258] ? __fget_files+0x2a/0x420 [ 2297.785689][ T3258] ? __fget_files+0x3a0/0x420 [ 2297.785704][ T3258] ? __fget_files+0x2a/0x420 [ 2297.785727][ T3258] __x64_sys_pread64+0x193/0x220 [ 2297.785746][ T3258] ? __pfx___x64_sys_pread64+0x10/0x10 [ 2297.785766][ T3258] ? do_syscall_64+0xbe/0x3b0 [ 2297.785790][ T3258] do_syscall_64+0xfa/0x3b0 [ 2297.785810][ T3258] ? lockdep_hardirqs_on+0x9c/0x150 [ 2297.785832][ T3258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2297.785848][ T3258] ? clear_bhb_loop+0x60/0xb0 [ 2297.785869][ T3258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2297.785885][ T3258] RIP: 0033:0x7f7a5878e929 [ 2297.785901][ T3258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2297.785916][ T3258] RSP: 002b:00007f7a595f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2297.785935][ T3258] RAX: ffffffffffffffda RBX: 00007f7a589b5fa0 RCX: 00007f7a5878e929 [ 2297.785948][ T3258] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000003 [ 2297.785959][ T3258] RBP: 00007f7a595f1090 R08: 0000000000000000 R09: 0000000000000000 [ 2297.785970][ T3258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2297.785981][ T3258] R13: 0000000000000000 R14: 00007f7a589b5fa0 R15: 00007f7a58adfa28 [ 2297.786008][ T3258] [ 2298.044181][ T3260] netlink: 'syz.0.7714': attribute type 1 has an invalid length. [ 2298.072669][ T3260] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2298.079863][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2298.105428][ T10] usb 3-1: device descriptor read/8, error -71 [ 2298.131494][ T3261] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 2298.183443][ T3260] bond3: (slave veth7): Enslaving as an active interface with a down link [ 2298.374896][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2298.408163][ T10] usb 3-1: device descriptor read/8, error -71 [ 2298.462305][ T3273] program syz.4.7717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2298.516989][ T10] usb usb3-port1: unable to enumerate USB device [ 2298.549044][ T3281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7719'. [ 2300.034658][T24972] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2300.092880][ T3299] FAULT_INJECTION: forcing a failure. [ 2300.092880][ T3299] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2300.133677][ T3299] CPU: 1 UID: 0 PID: 3299 Comm: syz.5.7724 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 2300.133702][ T3299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2300.133712][ T3299] Call Trace: [ 2300.133719][ T3299] [ 2300.133726][ T3299] dump_stack_lvl+0x189/0x250 [ 2300.133754][ T3299] ? __pfx____ratelimit+0x10/0x10 [ 2300.133776][ T3299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2300.133798][ T3299] ? __pfx__printk+0x10/0x10 [ 2300.133816][ T3299] ? fs_reclaim_acquire+0x7d/0x100 [ 2300.133839][ T3299] should_fail_ex+0x414/0x560 [ 2300.133862][ T3299] prepare_alloc_pages+0x213/0x610 [ 2300.133885][ T3299] __alloc_frozen_pages_noprof+0x123/0x370 [ 2300.133907][ T3299] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2300.133934][ T3299] ? policy_nodemask+0x27c/0x720 [ 2300.133948][ T3299] ? __lock_acquire+0xab9/0xd20 [ 2300.133976][ T3299] alloc_pages_mpol+0x232/0x4a0 [ 2300.134000][ T3299] vma_alloc_folio_noprof+0xe4/0x200 [ 2300.134021][ T3299] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2300.134052][ T3299] folio_prealloc+0x30/0x180 [ 2300.134071][ T3299] __handle_mm_fault+0x2c88/0x5620 [ 2300.134116][ T3299] ? __pfx___handle_mm_fault+0x10/0x10 [ 2300.134157][ T3299] ? find_vma+0xe7/0x160 [ 2300.134173][ T3299] ? __pfx_find_vma+0x10/0x10 [ 2300.134190][ T3299] handle_mm_fault+0x40a/0x8e0 [ 2300.134221][ T3299] do_user_addr_fault+0x764/0x1390 [ 2300.134259][ T3299] exc_page_fault+0x76/0xf0 [ 2300.134283][ T3299] asm_exc_page_fault+0x26/0x30 [ 2300.134299][ T3299] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 2300.134318][ T3299] Code: 00 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 00 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 2300.134333][ T3299] RSP: 0018:ffffc90003f5fb48 EFLAGS: 00050206 [ 2300.134347][ T3299] RAX: ffffffff84c1be01 RBX: 0000000000001000 RCX: 0000000000000240 [ 2300.134359][ T3299] RDX: 0000000000000000 RSI: ffff8880309ccdc0 RDI: 000020000000d000 [ 2300.134371][ T3299] RBP: ffffc90003f5fc90 R08: ffff8880309ccfff R09: 1ffff110061399ff [ 2300.134384][ T3299] R10: dffffc0000000000 R11: ffffed1006139a00 R12: 000020000000d240 [ 2300.134396][ T3299] R13: 00007ffffffff000 R14: ffff8880309cc000 R15: 000020000000c240 [ 2300.134417][ T3299] ? _copy_to_user+0x31/0xb0 [ 2300.134440][ T3299] _copy_to_user+0x8a/0xb0 [ 2300.134457][ T3299] pagemap_read+0x4d4/0x7b0 [ 2300.134483][ T3299] ? __pfx_pagemap_read+0x10/0x10 [ 2300.134508][ T3299] ? rw_verify_area+0x258/0x650 [ 2300.134528][ T3299] ? __pfx_pagemap_read+0x10/0x10 [ 2300.134545][ T3299] vfs_read+0x200/0x980 [ 2300.134575][ T3299] ? __pfx_vfs_read+0x10/0x10 [ 2300.134599][ T3299] ? __fget_files+0x2a/0x420 [ 2300.134620][ T3299] ? __fget_files+0x2a/0x420 [ 2300.134644][ T3299] ? __fget_files+0x3a0/0x420 [ 2300.134660][ T3299] ? __fget_files+0x2a/0x420 [ 2300.134687][ T3299] __x64_sys_pread64+0x193/0x220 [ 2300.134707][ T3299] ? __pfx___x64_sys_pread64+0x10/0x10 [ 2300.134722][ T3299] ? rcu_is_watching+0x15/0xb0 [ 2300.134751][ T3299] ? do_syscall_64+0xbe/0x3b0 [ 2300.134778][ T3299] do_syscall_64+0xfa/0x3b0 [ 2300.134799][ T3299] ? lockdep_hardirqs_on+0x9c/0x150 [ 2300.134819][ T3299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2300.134836][ T3299] ? clear_bhb_loop+0x60/0xb0 [ 2300.134854][ T3299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2300.134870][ T3299] RIP: 0033:0x7f060318e929 [ 2300.134885][ T3299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2300.134899][ T3299] RSP: 002b:00007f0600ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2300.134916][ T3299] RAX: ffffffffffffffda RBX: 00007f06033b5fa0 RCX: 00007f060318e929 [ 2300.134927][ T3299] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000003 [ 2300.134939][ T3299] RBP: 00007f0600ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 2300.134950][ T3299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2300.134959][ T3299] R13: 0000000000000000 R14: 00007f06033b5fa0 R15: 00007f06034dfa28 [ 2300.134985][ T3299] [ 2300.195283][T24972] usb 3-1: Using ep0 maxpacket: 8 [ 2300.822670][T24972] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2300.840539][T24972] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2300.941029][ T3319] ptrace attach of "./syz-executor exec"[28578] was attempted by "./syz-executor exec"[3319] [ 2301.251403][T24972] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2301.267437][T24972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.277990][T24972] usb 3-1: Product: syz [ 2301.282266][T24972] usb 3-1: Manufacturer: syz [ 2302.067232][T24972] usb 3-1: SerialNumber: syz [ 2302.947371][ T5935] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2303.105197][ T5935] usb 6-1: Using ep0 maxpacket: 16 [ 2303.112277][ T5935] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 2303.139381][ T5935] usb 6-1: config 0 has no interface number 0 [ 2303.161735][ T3330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2303.174242][ T5935] usb 6-1: config 0 interface 237 has no altsetting 0 [ 2303.195420][ T3330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2303.196895][ T5935] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 2303.228088][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2303.246459][ T5935] usb 6-1: Product: syz [ 2303.252782][ T5935] usb 6-1: Manufacturer: syz [ 2303.263670][ T5935] usb 6-1: SerialNumber: syz [ 2303.282429][ T5935] usb 6-1: config 0 descriptor?? [ 2303.297814][ T5935] snd_usb_podhd 6-1:0.237: Line 6 POD HD300 found [ 2303.309554][T24972] usb 3-1: 0:2 : does not exist [ 2303.420584][T24972] usb 3-1: USB disconnect, device number 26 [ 2303.473412][T31871] udevd[31871]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2303.577010][ T5935] snd_usb_podhd 6-1:0.237: cannot get proper max packet size [ 2303.597409][ T5935] snd_usb_podhd 6-1:0.237: Line 6 POD HD300 now disconnected [ 2303.633053][ T5935] snd_usb_podhd 6-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 2303.788349][ T924] usb 6-1: USB disconnect, device number 91 [ 2304.178192][ T3340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7735'. [ 2304.225475][ T5935] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2304.386864][ T5935] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2304.429119][ T5935] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2304.474704][ T5935] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2304.495074][ T5935] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2304.546581][ T5935] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2304.632719][ T5935] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2304.693633][ T5935] usb 7-1: config 0 descriptor?? [ 2305.091922][ T3361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7741'. [ 2305.158619][ T5935] plantronics 0003:047F:FFFF.0077: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2305.522133][ T3370] netlink: 'syz.2.7744': attribute type 1 has an invalid length. [ 2306.131700][ T3376] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2306.480843][ T3384] xt_ecn: cannot match TCP bits for non-tcp packets [ 2306.855373][ T5935] usb 7-1: reset high-speed USB device number 19 using dummy_hcd [ 2307.460986][ T3412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7754'. [ 2307.548391][ T3413] ptrace attach of "./syz-executor exec"[28578] was attempted by "./syz-executor exec"[3413] [ 2308.127174][ T3419] loop3: detected capacity change from 0 to 1 [ 2308.186148][ T3419] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 [ 2308.218171][ T3419] loop3: p1 start 791543808 is beyond EOD, truncated [ 2308.250596][T24982] hid-generic 00A0:0008:0003.0078: unknown main item tag 0x7 [ 2308.266914][ T3419] loop3: p2 start 1633771873 is beyond EOD, truncated [ 2308.325031][T24982] hid-generic 00A0:0008:0003.0078: item fetching failed at offset 14/15 [ 2308.334184][T24982] hid-generic 00A0:0008:0003.0078: probe with driver hid-generic failed with error -22 [ 2308.347142][ T3419] loop3: p3 start 1633771873 is beyond EOD, truncated [ 2308.430403][ T3419] loop3: p4 start 1633771873 is beyond EOD, truncated [ 2308.514636][ T3419] loop3: p5 start 1633771873 is beyond EOD, truncated [ 2308.545588][ T3419] loop3: p6 start 1633771776 is beyond EOD, truncated [ 2308.552424][ T3419] loop3: p7 start 1633771873 is beyond EOD, truncated [ 2308.582676][ T3419] loop3: p8 start 1886744434 is beyond EOD, truncated [ 2308.589767][ T3419] loop3: p9 start 1633771873 is beyond EOD, truncated [ 2308.595913][ T3412] syzkaller1: entered promiscuous mode [ 2308.602028][ T3412] syzkaller1: entered allmulticast mode [ 2308.602556][ T3419] loop3: p10 start 1633771873 is beyond EOD, truncated [ 2308.658106][T24975] usb 7-1: USB disconnect, device number 19 [ 2308.857805][ T3430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2308.948356][ T3430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2309.120893][T32421] usb 6-1: new low-speed USB device number 92 using dummy_hcd [ 2309.338614][T32421] usb 6-1: device descriptor read/all, error -61 [ 2309.554880][T32421] usb 6-1: new low-speed USB device number 93 using dummy_hcd [ 2310.136820][T32421] usb 6-1: device descriptor read/64, error -71 [ 2310.266352][T32421] usb usb6-port1: attempt power cycle [ 2310.405990][ T3450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7761'. [ 2310.416429][ T3450] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.7761'. [ 2310.634673][T32421] usb 6-1: new low-speed USB device number 94 using dummy_hcd [ 2310.673174][T32421] usb 6-1: device descriptor read/8, error -71 [ 2310.720200][ T3455] nftables ruleset with unbound set [ 2310.850751][ T3455] netlink: 'syz.0.7764': attribute type 9 has an invalid length. [ 2310.956166][T32421] usb 6-1: new low-speed USB device number 95 using dummy_hcd [ 2310.969930][ T3470] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7764'. [ 2311.006159][T32421] usb 6-1: device descriptor read/8, error -71 [ 2311.021760][ T3471] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7767'. [ 2311.121355][ T3465] netlink: 'syz.4.7767': attribute type 16 has an invalid length. [ 2311.135739][ T5935] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2311.143809][T32421] usb usb6-port1: unable to enumerate USB device [ 2311.170500][ T3465] netlink: 'syz.4.7767': attribute type 17 has an invalid length. [ 2311.301247][ T5935] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 2311.311638][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2311.327784][ T5935] usb 3-1: Product: syz [ 2311.420571][ T5935] usb 3-1: Manufacturer: syz [ 2311.496199][ T5935] usb 3-1: SerialNumber: syz [ 2312.865539][ T5935] gspca_main: pac207-2.14.0 probing 093a:2476 [ 2312.915012][ T5935] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 2313.043613][ T5935] usb 3-1: USB disconnect, device number 27 [ 2313.279624][ T3487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7770'. [ 2313.464775][T24982] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2313.637125][T24982] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2313.647775][ T3491] fuse: Bad value for 'fd' [ 2313.661518][T24982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2313.690297][T24982] usb 6-1: config 0 descriptor?? [ 2313.991583][T24982] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2314.020111][T24982] [drm:udl_init] *ERROR* Selecting channel failed [ 2314.201896][T24982] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 2314.206870][ T3505] fuse: Bad value for 'group_id' [ 2314.232281][T24982] [drm] Initialized udl on minor 2 [ 2314.265144][ T3502] netlink: 'syz.2.7776': attribute type 11 has an invalid length. [ 2314.300576][ T3505] fuse: Bad value for 'group_id' [ 2314.330671][T24982] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2314.386499][T24982] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 2314.466598][T24982] usb 6-1: USB disconnect, device number 96 [ 2314.494316][T24972] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2314.526799][ T3511] FAULT_INJECTION: forcing a failure. [ 2314.526799][ T3511] name failslab, interval 1, probability 0, space 0, times 0 [ 2314.535206][ T3514] FAULT_INJECTION: forcing a failure. [ 2314.535206][ T3514] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2314.546766][T24972] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 2314.592944][ T3514] CPU: 1 UID: 0 PID: 3514 Comm: syz.6.7783 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 2314.592993][ T3514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2314.593017][ T3514] Call Trace: [ 2314.593033][ T3514] [ 2314.593051][ T3514] dump_stack_lvl+0x189/0x250 [ 2314.593111][ T3514] ? __pfx____ratelimit+0x10/0x10 [ 2314.593135][ T3514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2314.593159][ T3514] ? __pfx__printk+0x10/0x10 [ 2314.593179][ T3514] ? fs_reclaim_acquire+0x7d/0x100 [ 2314.593208][ T3514] should_fail_ex+0x414/0x560 [ 2314.593234][ T3514] prepare_alloc_pages+0x213/0x610 [ 2314.593261][ T3514] __alloc_frozen_pages_noprof+0x123/0x370 [ 2314.593286][ T3514] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2314.593315][ T3514] ? policy_nodemask+0x27c/0x720 [ 2314.593331][ T3514] ? __lock_acquire+0xab9/0xd20 [ 2314.593358][ T3514] alloc_pages_mpol+0x232/0x4a0 [ 2314.593381][ T3514] vma_alloc_folio_noprof+0xe4/0x200 [ 2314.593402][ T3514] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2314.593433][ T3514] folio_prealloc+0x30/0x180 [ 2314.593452][ T3514] __handle_mm_fault+0x2c88/0x5620 [ 2314.593496][ T3514] ? __pfx___handle_mm_fault+0x10/0x10 [ 2314.593541][ T3514] ? find_vma+0xe7/0x160 [ 2314.593554][ T3514] ? __pfx_find_vma+0x10/0x10 [ 2314.593574][ T3514] handle_mm_fault+0x40a/0x8e0 [ 2314.593606][ T3514] do_user_addr_fault+0x764/0x1390 [ 2314.593643][ T3514] exc_page_fault+0x76/0xf0 [ 2314.593667][ T3514] asm_exc_page_fault+0x26/0x30 [ 2314.593683][ T3514] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 2314.593700][ T3514] Code: 00 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 00 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 2314.593716][ T3514] RSP: 0018:ffffc90003537b48 EFLAGS: 00050206 [ 2314.593731][ T3514] RAX: ffffffff84c1be01 RBX: 0000000000001000 RCX: 0000000000000240 [ 2314.593744][ T3514] RDX: 0000000000000000 RSI: ffff88806274adc0 RDI: 000020000000f000 [ 2314.593756][ T3514] RBP: ffffc90003537c90 R08: ffff88806274afff R09: 1ffff1100c4e95ff [ 2314.593769][ T3514] R10: dffffc0000000000 R11: ffffed100c4e9600 R12: 000020000000f240 [ 2314.593782][ T3514] R13: 00007ffffffff000 R14: ffff88806274a000 R15: 000020000000e240 [ 2314.593803][ T3514] ? _copy_to_user+0x31/0xb0 [ 2314.593826][ T3514] _copy_to_user+0x8a/0xb0 [ 2314.593844][ T3514] pagemap_read+0x4d4/0x7b0 [ 2314.593871][ T3514] ? __pfx_pagemap_read+0x10/0x10 [ 2314.593895][ T3514] ? rw_verify_area+0x258/0x650 [ 2314.593918][ T3514] ? __pfx_pagemap_read+0x10/0x10 [ 2314.593937][ T3514] vfs_read+0x200/0x980 [ 2314.593968][ T3514] ? __pfx_vfs_read+0x10/0x10 [ 2314.593993][ T3514] ? __fget_files+0x2a/0x420 [ 2314.594015][ T3514] ? __fget_files+0x2a/0x420 [ 2314.594031][ T3514] ? __fget_files+0x3a0/0x420 [ 2314.594046][ T3514] ? __fget_files+0x2a/0x420 [ 2314.594069][ T3514] __x64_sys_pread64+0x193/0x220 [ 2314.594087][ T3514] ? __pfx___x64_sys_pread64+0x10/0x10 [ 2314.594108][ T3514] ? rcu_is_watching+0x15/0xb0 [ 2314.594133][ T3514] ? do_syscall_64+0xbe/0x3b0 [ 2314.594158][ T3514] do_syscall_64+0xfa/0x3b0 [ 2314.594177][ T3514] ? lockdep_hardirqs_on+0x9c/0x150 [ 2314.594196][ T3514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2314.594212][ T3514] ? clear_bhb_loop+0x60/0xb0 [ 2314.594233][ T3514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2314.594248][ T3514] RIP: 0033:0x7f0a6f58e929 [ 2314.594263][ T3514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2314.594277][ T3514] RSP: 002b:00007f0a703a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2314.594293][ T3514] RAX: ffffffffffffffda RBX: 00007f0a6f7b5fa0 RCX: 00007f0a6f58e929 [ 2314.594305][ T3514] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000003 [ 2314.594316][ T3514] RBP: 00007f0a703a5090 R08: 0000000000000000 R09: 0000000000000000 [ 2314.594326][ T3514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2314.594335][ T3514] R13: 0000000000000000 R14: 00007f0a6f7b5fa0 R15: 00007f0a6f8dfa28 [ 2314.594360][ T3514] [ 2314.985616][ T3511] CPU: 0 UID: 0 PID: 3511 Comm: syz.4.7782 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 2314.985641][ T3511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2314.985652][ T3511] Call Trace: [ 2314.985660][ T3511] [ 2314.985668][ T3511] dump_stack_lvl+0x189/0x250 [ 2314.985696][ T3511] ? __pfx____ratelimit+0x10/0x10 [ 2314.985718][ T3511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2314.985740][ T3511] ? __pfx__printk+0x10/0x10 [ 2314.985762][ T3511] ? __pfx___might_resched+0x10/0x10 [ 2314.985782][ T3511] ? fs_reclaim_acquire+0x7d/0x100 [ 2314.985804][ T3511] should_fail_ex+0x414/0x560 [ 2314.985827][ T3511] should_failslab+0xa8/0x100 [ 2314.985844][ T3511] __kmalloc_noprof+0xcb/0x4f0 [ 2314.985858][ T3511] ? sock_kmalloc+0xd6/0x160 [ 2314.985874][ T3511] ? lockdep_hardirqs_on+0x9c/0x150 [ 2314.985896][ T3511] sock_kmalloc+0xd6/0x160 [ 2314.985914][ T3511] alg_setkey+0x55/0x190 [ 2314.985928][ T3511] ? alg_setsockopt+0x3c5/0x4a0 [ 2314.985946][ T3511] alg_setsockopt+0x3da/0x4a0 [ 2314.985965][ T3511] ? __pfx_alg_setsockopt+0x10/0x10 [ 2314.985985][ T3511] do_sock_setsockopt+0x25a/0x3e0 [ 2314.986007][ T3511] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2314.986031][ T3511] ? __fget_files+0x2a/0x420 [ 2314.986058][ T3511] __x64_sys_setsockopt+0x18b/0x220 [ 2314.986081][ T3511] do_syscall_64+0xfa/0x3b0 [ 2314.986103][ T3511] ? lockdep_hardirqs_on+0x9c/0x150 [ 2314.986125][ T3511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2314.986141][ T3511] ? clear_bhb_loop+0x60/0xb0 [ 2314.986161][ T3511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2314.986178][ T3511] RIP: 0033:0x7fa525d8e929 [ 2314.986194][ T3511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2314.986208][ T3511] RSP: 002b:00007fa526bc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2314.986226][ T3511] RAX: ffffffffffffffda RBX: 00007fa525fb5fa0 RCX: 00007fa525d8e929 [ 2314.986239][ T3511] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 2314.986249][ T3511] RBP: 00007fa526bc3090 R08: 0000000000000011 R09: 0000000000000000 [ 2314.986260][ T3511] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 2314.986271][ T3511] R13: 0000000000000000 R14: 00007fa525fb5fa0 R15: 00007fa5260dfa28 [ 2314.986299][ T3511] [ 2315.310777][ T3520] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 2315.622832][ T3529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2315.695169][T24972] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 2315.730790][ T3529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2315.862478][T24972] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2315.873728][T24972] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2315.942876][T24975] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2315.975074][T24982] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2315.993230][T24972] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2316.019370][T24972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.065318][T24972] usb 5-1: Product: syz [ 2316.069530][T24972] usb 5-1: Manufacturer: syz [ 2316.074133][T24972] usb 5-1: SerialNumber: syz [ 2316.092687][ T3522] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2316.119708][T24975] usb 3-1: Using ep0 maxpacket: 8 [ 2316.125762][T24982] usb 6-1: Using ep0 maxpacket: 16 [ 2316.136328][T24982] usb 6-1: config 0 has no interfaces? [ 2316.142320][T24975] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2316.154010][T24982] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 2316.163703][T24975] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 2316.163732][T24975] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 2316.602461][T24982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2316.626318][T24982] usb 6-1: config 0 descriptor?? [ 2316.696389][T24975] usb 3-1: string descriptor 0 read error: -71 [ 2316.907290][T24975] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2316.934947][T24975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.971965][T24975] usb 3-1: can't set config #1, error -71 [ 2316.991439][T24975] usb 3-1: USB disconnect, device number 28 [ 2317.453765][T24972] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2317.463624][T24972] cdc_ncm 5-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 2317.493892][T24972] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 2317.664250][T24972] cdc_ncm 5-1:1.0: setting tx_max = 36 [ 2317.884605][T24982] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2317.924885][T32421] usb 6-1: USB disconnect, device number 97 [ 2318.079976][T24982] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2318.092712][T24972] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2318.138285][T24982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2318.205621][T24982] usb 3-1: config 0 descriptor?? [ 2318.236438][T24982] cp210x 3-1:0.0: cp210x converter detected [ 2318.285532][T24972] usb 5-1: USB disconnect, device number 105 [ 2318.306309][T24972] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 2318.476166][T24982] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2318.492441][T24982] cp210x 3-1:0.0: querying part number failed [ 2318.531908][T24982] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2318.591517][T24982] usb 3-1: USB disconnect, device number 29 [ 2318.599805][ T3557] loop3: detected capacity change from 0 to 1 [ 2318.634234][T24982] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2318.653493][T31216] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 [ 2318.665143][T24982] cp210x 3-1:0.0: device disconnected [ 2318.684823][T31216] loop3: p1 start 791543808 is beyond EOD, truncated [ 2318.695618][T31216] loop3: p2 start 1633771873 is beyond EOD, truncated [ 2318.710847][T31216] loop3: p3 start 1633771873 is beyond EOD, truncated [ 2318.730288][T31216] loop3: p4 start 1633771873 is beyond EOD, truncated [ 2318.758576][T31216] loop3: p5 start 1633771873 is beyond EOD, truncated [ 2318.779556][T31216] loop3: p6 start 1633771776 is beyond EOD, truncated [ 2318.802411][T31216] loop3: p7 start 1633771873 is beyond EOD, truncated [ 2318.830229][T31216] loop3: p8 start 1886744434 is beyond EOD, truncated [ 2318.855985][T31216] loop3: p9 start 1633771873 is beyond EOD, truncated [ 2318.885999][T31216] loop3: p10 start 1633771873 is beyond EOD, truncated [ 2318.918725][ T3557] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 [ 2318.942915][ T3569] FAULT_INJECTION: forcing a failure. [ 2318.942915][ T3569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2318.947275][ T3557] loop3: p1 start 791543808 is beyond EOD, [ 2318.974753][ T3569] CPU: 0 UID: 0 PID: 3569 Comm: syz.4.7799 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 2318.974780][ T3569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2318.974790][ T3569] Call Trace: [ 2318.974797][ T3569] [ 2318.974804][ T3569] dump_stack_lvl+0x189/0x250 [ 2318.974832][ T3569] ? __pfx____ratelimit+0x10/0x10 [ 2318.974853][ T3569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2318.974876][ T3569] ? __pfx__printk+0x10/0x10 [ 2318.974915][ T3569] should_fail_ex+0x414/0x560 [ 2318.974939][ T3569] _copy_to_user+0x31/0xb0 [ 2318.974958][ T3569] pagemap_read+0x4d4/0x7b0 [ 2318.974983][ T3569] ? __pfx_pagemap_read+0x10/0x10 [ 2318.975006][ T3569] ? rw_verify_area+0x258/0x650 [ 2318.975029][ T3569] ? __pfx_pagemap_read+0x10/0x10 [ 2318.975047][ T3569] vfs_read+0x200/0x980 [ 2318.975079][ T3569] ? __pfx_vfs_read+0x10/0x10 [ 2318.975103][ T3569] ? __fget_files+0x2a/0x420 [ 2318.975124][ T3569] ? __fget_files+0x2a/0x420 [ 2318.975140][ T3569] ? __fget_files+0x3a0/0x420 [ 2318.975156][ T3569] ? __fget_files+0x2a/0x420 [ 2318.975182][ T3569] __x64_sys_pread64+0x193/0x220 [ 2318.975202][ T3569] ? __pfx___x64_sys_pread64+0x10/0x10 [ 2318.975217][ T3569] ? rcu_is_watching+0x15/0xb0 [ 2318.975245][ T3569] ? do_syscall_64+0xbe/0x3b0 [ 2318.975270][ T3569] do_syscall_64+0xfa/0x3b0 [ 2318.975291][ T3569] ? lockdep_hardirqs_on+0x9c/0x150 [ 2318.975311][ T3569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2318.975327][ T3569] ? clear_bhb_loop+0x60/0xb0 [ 2318.975347][ T3569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2318.975363][ T3569] RIP: 0033:0x7fa525d8e929 [ 2318.975378][ T3569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2318.975393][ T3569] RSP: 002b:00007fa526bc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2318.975411][ T3569] RAX: ffffffffffffffda RBX: 00007fa525fb5fa0 RCX: 00007fa525d8e929 [ 2318.975423][ T3569] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000003 [ 2318.975435][ T3569] RBP: 00007fa526bc3090 R08: 0000000000000000 R09: 0000000000000000 [ 2318.975446][ T3569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2318.975456][ T3569] R13: 0000000000000000 R14: 00007fa525fb5fa0 R15: 00007fa5260dfa28 [ 2318.975484][ T3569] [ 2319.010759][ T3557] truncated [ 2319.165685][ C1] vkms_vblank_simulate: vblank timer overrun [ 2319.202307][T24982] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2319.316714][ T3557] loop3: p2 start 1633771873 is beyond EOD, truncated [ 2319.383166][ T3557] loop3: p3 start 1633771873 is beyond EOD, truncated [ 2319.493795][ T3557] loop3: p4 start 1633771873 is beyond EOD, truncated [ 2319.522910][ T3557] loop3: p5 start 1633771873 is beyond EOD, truncated [ 2319.535278][ T3557] loop3: p6 start 1633771776 is beyond EOD, truncated [ 2319.542478][ T3557] loop3: p7 start 1633771873 is beyond EOD, truncated [ 2319.550363][ T3557] loop3: p8 start 1886744434 is beyond EOD, truncated [ 2319.560174][ T3557] loop3: p9 start 1633771873 is beyond EOD, truncated [ 2319.580628][ T3557] loop3: p10 start 1633771873 is beyond EOD, truncated [ 2319.606474][T24982] usb 3-1: config 0 has an invalid interface number: 33 but max is 0 [ 2319.622812][T24982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2319.650036][T24982] usb 3-1: config 0 has no interface number 0 [ 2319.656289][T24982] usb 3-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 2319.695054][T24982] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2319.711334][T24982] usb 3-1: config 0 interface 33 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2319.736856][T24982] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 2319.746865][T24982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2319.765047][T32421] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2319.765140][T24982] usb 3-1: Product: syz [ 2319.777708][T24982] usb 3-1: Manufacturer: syz [ 2319.782336][T24982] usb 3-1: SerialNumber: syz [ 2319.798427][T24982] usb 3-1: config 0 descriptor?? [ 2319.810832][ T3560] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2319.826917][T24982] hdpvr 3-1:0.33: Could not find bulk-in endpoint [ 2319.833437][T24982] hdpvr 3-1:0.33: probe with driver hdpvr failed with error -12 [ 2319.955271][T32421] usb 7-1: Using ep0 maxpacket: 8 [ 2319.967483][T32421] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2319.979679][T32421] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 2320.004545][T32421] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2320.035193][T32421] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2320.081001][T32421] usb 7-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 2320.100046][T32421] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.114909][T24972] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2320.117414][T32421] usb 7-1: Product: syz [ 2320.138346][T32421] usb 7-1: Manufacturer: syz [ 2320.143082][T32421] usb 7-1: SerialNumber: syz [ 2320.161593][ T10] usb 3-1: USB disconnect, device number 30 [ 2320.183242][T32421] usb 7-1: config 0 descriptor?? [ 2320.234804][T24982] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 2320.261034][T32421] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input154 [ 2320.309849][T24972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2320.342174][T24972] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2320.374764][T24972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2320.406591][T24982] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 2320.422710][T24972] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2320.428842][T32421] imon:send_packet: packet tx failed (-71) [ 2320.439796][T24982] usb 5-1: config 0 has no interface number 0 [ 2320.451094][T24982] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 2320.465466][T32421] imon 7-1:0.0: panel buttons/knobs setup failed [ 2320.468411][T24982] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2320.490331][T24972] usb 6-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 2320.509439][T24972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.520197][T24972] usb 6-1: Product: syz [ 2320.529704][T24972] usb 6-1: Manufacturer: syz [ 2320.538708][T24972] usb 6-1: SerialNumber: syz [ 2320.543797][T24982] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 2320.561044][T24982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.572127][T24982] usb 5-1: Product: syz [ 2320.580674][T24972] usb 6-1: config 0 descriptor?? [ 2320.594163][T24982] usb 5-1: Manufacturer: syz [ 2320.602535][T24972] kvaser_usb 6-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 2320.621781][T24972] kvaser_usb 6-1:0.0: error -EMSGSIZE: Failed to initialize card [ 2320.631442][T24982] usb 5-1: SerialNumber: syz [ 2320.647445][T32421] rc_core: IR keymap rc-imon-pad not found [ 2320.650899][T24972] kvaser_usb 6-1:0.0: probe with driver kvaser_usb failed with error -90 [ 2320.663827][T32421] Registered IR keymap rc-empty [ 2320.665803][T24982] usb 5-1: config 0 descriptor?? [ 2320.685402][T32421] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2320.687447][ T3584] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 2320.716851][T32421] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2320.749002][T32421] imon:send_packet: packet tx failed (-71) [ 2320.757377][T24982] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 2320.775369][T32421] imon 7-1:0.0: remote input dev register failed [ 2320.791014][T32421] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 2320.800596][T24982] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 2320.892144][T32421] imon 7-1:0.0: unable to initialize intf0, err 0 [ 2320.924813][T32421] imon:imon_probe: failed to initialize context! [ 2320.943626][T32421] imon 7-1:0.0: unable to register, err -19 [ 2321.058156][T32421] usb 7-1: USB disconnect, device number 20 [ 2321.180203][T24982] usb 5-1: USB disconnect, device number 106 [ 2321.244025][T24982] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 2321.266550][T24982] cyberjack 5-1:0.69: device disconnected [ 2321.704812][T32421] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2321.865043][T32421] usb 7-1: Using ep0 maxpacket: 16 [ 2321.872394][T32421] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2321.878056][ T3628] trusted_key: encrypted_key: insufficient parameters specified [ 2321.897658][T32421] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 2321.936751][T32421] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 2321.973139][T32421] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2322.051574][T32421] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2322.072264][T32421] usb 7-1: Product: syz [ 2322.093863][T32421] usb 7-1: Manufacturer: syz [ 2322.120226][T32421] usb 7-1: SerialNumber: syz [ 2322.154404][T32421] usb 7-1: config 0 descriptor?? [ 2322.164202][ T3618] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2322.175081][T32421] mcba_usb 7-1:0.0: Can't find endpoints [ 2322.327151][ T3641] loop3: detected capacity change from 0 to 1 [ 2322.340292][T31871] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 [ 2322.347490][T31871] loop3: p1 start 791543808 is beyond EOD, truncated [ 2322.363685][T31871] loop3: p2 start 1633771873 is beyond EOD, truncated [ 2322.371368][T31871] loop3: p3 start 1633771873 is beyond EOD, truncated [ 2322.391065][ T3618] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7808'. [ 2322.404937][ T3618] tipc: Started in network mode [ 2322.414596][ T3618] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 2322.423717][T31871] loop3: p4 start 1633771873 is beyond EOD, truncated [ 2322.433809][T31871] loop3: p5 start 1633771873 is beyond EOD, truncated [ 2322.443164][T31871] loop3: p6 start 1633771776 is beyond EOD, truncated [ 2322.458529][T31871] loop3: p7 start 1633771873 is beyond EOD, truncated [ 2322.468709][T31871] loop3: p8 start 1886744434 is beyond EOD, truncated [ 2322.471079][ T3618] tipc: Enabled bearer , priority 0 [ 2322.479224][T31871] loop3: p9 start 1633771873 is beyond EOD, truncated [ 2322.500006][T31871] loop3: p10 start 1633771873 is beyond EOD, truncated [ 2322.509284][ T3641] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 [ 2322.526871][T24972] usb 7-1: USB disconnect, device number 21 [ 2322.543756][ T3641] loop3: p1 start 791543808 is beyond EOD, truncated [ 2322.563635][ T3641] loop3: p2 start 1633771873 is beyond EOD, truncated [ 2322.601542][ T3641] loop3: p3 start 1633771873 is beyond EOD, truncated [ 2322.617133][ T3641] loop3: p4 start 1633771873 is beyond EOD, truncated [ 2322.640349][ T3641] loop3: p5 start 1633771873 is beyond EOD, truncated [ 2322.669451][ T3641] loop3: p6 start 1633771776 is beyond EOD, truncated [ 2322.677804][ T3641] loop3: p7 start 1633771873 is beyond EOD, truncated [ 2322.714963][ T3641] loop3: p8 start 1886744434 is beyond EOD, truncated [ 2322.744457][ T3641] loop3: p9 start 1633771873 is beyond EOD, truncated [ 2322.761334][ T3641] loop3: p10 start 1633771873 is beyond EOD, truncated [ 2322.963789][ T3653] binder: 3650:3653 ioctl c0306201 2000000003c0 returned -14 [ 2323.011460][T32421] usb 6-1: USB disconnect, device number 98 [ 2323.116910][ T3663] FAULT_INJECTION: forcing a failure. [ 2323.116910][ T3663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2323.139960][ T3663] CPU: 0 UID: 0 PID: 3663 Comm: syz.2.7821 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 2323.139987][ T3663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2323.139999][ T3663] Call Trace: [ 2323.140007][ T3663] [ 2323.140015][ T3663] dump_stack_lvl+0x189/0x250 [ 2323.140044][ T3663] ? __pfx____ratelimit+0x10/0x10 [ 2323.140068][ T3663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2323.140091][ T3663] ? __pfx__printk+0x10/0x10 [ 2323.140121][ T3663] should_fail_ex+0x414/0x560 [ 2323.140146][ T3663] _copy_to_user+0x31/0xb0 [ 2323.140164][ T3663] pagemap_read+0x4d4/0x7b0 [ 2323.140190][ T3663] ? __pfx_pagemap_read+0x10/0x10 [ 2323.140212][ T3663] ? rw_verify_area+0x258/0x650 [ 2323.140235][ T3663] ? __pfx_pagemap_read+0x10/0x10 [ 2323.140254][ T3663] vfs_read+0x200/0x980 [ 2323.140284][ T3663] ? __pfx_vfs_read+0x10/0x10 [ 2323.140308][ T3663] ? __fget_files+0x2a/0x420 [ 2323.140329][ T3663] ? __fget_files+0x2a/0x420 [ 2323.140345][ T3663] ? __fget_files+0x3a0/0x420 [ 2323.140361][ T3663] ? __fget_files+0x2a/0x420 [ 2323.140388][ T3663] __x64_sys_pread64+0x193/0x220 [ 2323.140408][ T3663] ? __pfx___x64_sys_pread64+0x10/0x10 [ 2323.140422][ T3663] ? rcu_is_watching+0x15/0xb0 [ 2323.140449][ T3663] ? do_syscall_64+0xbe/0x3b0 [ 2323.140479][ T3663] do_syscall_64+0xfa/0x3b0 [ 2323.140498][ T3663] ? lockdep_hardirqs_on+0x9c/0x150 [ 2323.140517][ T3663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2323.140531][ T3663] ? clear_bhb_loop+0x60/0xb0 [ 2323.140550][ T3663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2323.140564][ T3663] RIP: 0033:0x7f467358e929 [ 2323.140579][ T3663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2323.140592][ T3663] RSP: 002b:00007f4674372038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2323.140608][ T3663] RAX: ffffffffffffffda RBX: 00007f46737b5fa0 RCX: 00007f467358e929 [ 2323.140619][ T3663] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000003 [ 2323.140629][ T3663] RBP: 00007f4674372090 R08: 0000000000000000 R09: 0000000000000000 [ 2323.140638][ T3663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2323.140647][ T3663] R13: 0000000000000000 R14: 00007f46737b5fa0 R15: 00007f46738dfa28 [ 2323.140670][ T3663] [ 2323.426781][T24972] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2323.501605][T32421] tipc: Node number set to 4269801514 [ 2323.595227][T24972] usb 5-1: config 0 has no interfaces? [ 2323.606396][T24972] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2323.624584][T24972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2323.647487][T24972] usb 5-1: Product: syz [ 2323.663847][T24972] usb 5-1: Manufacturer: syz [ 2323.669836][T24972] usb 5-1: SerialNumber: syz [ 2323.739509][T24972] usb 5-1: config 0 descriptor?? [ 2323.902750][T32421] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2324.103430][T32421] usb 3-1: config 0 has no interfaces? [ 2324.121771][T32421] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2324.130940][T24975] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2324.144554][T32421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.179680][T32421] usb 3-1: Product: syz [ 2324.183939][T32421] usb 3-1: Manufacturer: syz [ 2324.225420][T32421] usb 3-1: SerialNumber: syz [ 2324.246465][T32421] usb 3-1: config 0 descriptor?? [ 2324.314871][T24975] usb 6-1: Using ep0 maxpacket: 8 [ 2324.325585][T24975] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2324.340401][T24975] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 2324.354092][T24975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 2324.373232][T24975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2324.384058][T24975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2324.400646][T24975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2324.411851][T24975] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2324.429814][T24975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2324.440318][T24975] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 2324.452706][T24975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 9060, setting to 1024 [ 2324.501387][T24975] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2324.533138][T24975] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 2324.552387][T24975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.563822][T24975] usb 6-1: Product: syz [ 2324.579026][T24975] usb 6-1: Manufacturer: syz [ 2324.584296][T24975] usb 6-1: SerialNumber: syz [ 2324.618810][T24975] usb 6-1: config 0 descriptor?? [ 2324.630589][ T3681] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 2324.742727][T24975] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2324.842838][ T3682] netlink: 'syz.5.7827': attribute type 10 has an invalid length. [ 2324.904718][ T3681] netlink: 'syz.5.7827': attribute type 10 has an invalid length. [ 2324.916192][ T3681] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7827'. [ 2324.949393][ T3682] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7827'. [ 2324.979844][ T3681] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.066765][ T3681] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.127652][ T3681] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.162585][T24975] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 2325.180584][ T3681] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.207830][T31870] udevd[31870]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2325.216453][ T3681] team0: Port device geneve0 added [ 2325.240953][ T3682] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2325.250708][ T3682] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2325.260215][ T3682] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2325.269793][ T3682] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2325.287931][T32421] usb 6-1: USB disconnect, device number 99 [ 2325.905262][T32421] usb 5-1: USB disconnect, device number 107 [ 2326.013589][ T3695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2326.068386][ T3695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2326.118558][ T3701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7831'. [ 2326.135692][ T3695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2326.150802][ T3701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7831'. [ 2326.174188][ T3695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2326.218166][ T3701] vxcan3: entered promiscuous mode [ 2326.223614][ T3701] vxcan3: entered allmulticast mode [ 2326.335836][T32421] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2326.431328][ T3710] FAULT_INJECTION: forcing a failure. [ 2326.431328][ T3710] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2326.450408][ T3710] CPU: 1 UID: 0 PID: 3710 Comm: syz.0.7835 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 2326.450432][ T3710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2326.450442][ T3710] Call Trace: [ 2326.450449][ T3710] [ 2326.450457][ T3710] dump_stack_lvl+0x189/0x250 [ 2326.450487][ T3710] ? __pfx____ratelimit+0x10/0x10 [ 2326.450510][ T3710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2326.450532][ T3710] ? __pfx__printk+0x10/0x10 [ 2326.450551][ T3710] ? fs_reclaim_acquire+0x7d/0x100 [ 2326.450578][ T3710] should_fail_ex+0x414/0x560 [ 2326.450601][ T3710] prepare_alloc_pages+0x213/0x610 [ 2326.450627][ T3710] __alloc_frozen_pages_noprof+0x123/0x370 [ 2326.450650][ T3710] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2326.450680][ T3710] ? policy_nodemask+0x27c/0x720 [ 2326.450695][ T3710] ? __lock_acquire+0xab9/0xd20 [ 2326.450718][ T3710] alloc_pages_mpol+0x232/0x4a0 [ 2326.450739][ T3710] vma_alloc_folio_noprof+0xe4/0x200 [ 2326.450759][ T3710] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2326.450789][ T3710] folio_prealloc+0x30/0x180 [ 2326.450808][ T3710] __handle_mm_fault+0x2c88/0x5620 [ 2326.450848][ T3710] ? __pfx___handle_mm_fault+0x10/0x10 [ 2326.450888][ T3710] ? find_vma+0xe7/0x160 [ 2326.450902][ T3710] ? __pfx_find_vma+0x10/0x10 [ 2326.450921][ T3710] handle_mm_fault+0x40a/0x8e0 [ 2326.450963][ T3710] do_user_addr_fault+0x764/0x1390 [ 2326.451005][ T3710] exc_page_fault+0x76/0xf0 [ 2326.451031][ T3710] asm_exc_page_fault+0x26/0x30 [ 2326.451047][ T3710] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 2326.451066][ T3710] Code: 00 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 00 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 2326.451081][ T3710] RSP: 0018:ffffc90004937b48 EFLAGS: 00050206 [ 2326.451097][ T3710] RAX: ffffffff84c1be01 RBX: 0000000000001000 RCX: 0000000000000240 [ 2326.451109][ T3710] RDX: 0000000000000000 RSI: ffff888034c20dc0 RDI: 0000200000011000 [ 2326.451121][ T3710] RBP: ffffc90004937c90 R08: ffff888034c20fff R09: 1ffff110069841ff [ 2326.451134][ T3710] R10: dffffc0000000000 R11: ffffed1006984200 R12: 0000200000011240 [ 2326.451147][ T3710] R13: 00007ffffffff000 R14: ffff888034c20000 R15: 0000200000010240 [ 2326.451169][ T3710] ? _copy_to_user+0x31/0xb0 [ 2326.451189][ T3710] _copy_to_user+0x8a/0xb0 [ 2326.451205][ T3710] pagemap_read+0x4d4/0x7b0 [ 2326.451229][ T3710] ? __pfx_pagemap_read+0x10/0x10 [ 2326.451252][ T3710] ? rw_verify_area+0x258/0x650 [ 2326.451272][ T3710] ? __pfx_pagemap_read+0x10/0x10 [ 2326.451288][ T3710] vfs_read+0x200/0x980 [ 2326.451316][ T3710] ? __pfx_vfs_read+0x10/0x10 [ 2326.451337][ T3710] ? __fget_files+0x2a/0x420 [ 2326.451357][ T3710] ? __fget_files+0x2a/0x420 [ 2326.451372][ T3710] ? __fget_files+0x3a0/0x420 [ 2326.451390][ T3710] ? __fget_files+0x2a/0x420 [ 2326.451416][ T3710] __x64_sys_pread64+0x193/0x220 [ 2326.451435][ T3710] ? __pfx___x64_sys_pread64+0x10/0x10 [ 2326.451449][ T3710] ? rcu_is_watching+0x15/0xb0 [ 2326.451476][ T3710] ? do_syscall_64+0xbe/0x3b0 [ 2326.451502][ T3710] do_syscall_64+0xfa/0x3b0 [ 2326.451520][ T3710] ? lockdep_hardirqs_on+0x9c/0x150 [ 2326.451541][ T3710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2326.451557][ T3710] ? clear_bhb_loop+0x60/0xb0 [ 2326.451575][ T3710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2326.451588][ T3710] RIP: 0033:0x7f7a5878e929 [ 2326.451601][ T3710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2326.451614][ T3710] RSP: 002b:00007f7a595f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2326.451630][ T3710] RAX: ffffffffffffffda RBX: 00007f7a589b5fa0 RCX: 00007f7a5878e929 [ 2326.451642][ T3710] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000003 [ 2326.451653][ T3710] RBP: 00007f7a595f1090 R08: 0000000000000000 R09: 0000000000000000 [ 2326.451663][ T3710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2326.451672][ T3710] R13: 0000000000000000 R14: 00007f7a589b5fa0 R15: 00007f7a58adfa28 [ 2326.451701][ T3710] [ 2326.843805][ C1] vkms_vblank_simulate: vblank timer overrun [ 2326.902562][T24982] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 2326.915247][T32421] usb 5-1: Using ep0 maxpacket: 32 [ 2326.922387][T17247] usb 3-1: USB disconnect, device number 31 [ 2326.954124][T32421] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2326.963154][T32421] usb 5-1: config 3 has an invalid interface number: 42 but max is 2 [ 2326.971847][T32421] usb 5-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 2326.980787][T32421] usb 5-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 2326.989507][T32421] usb 5-1: config 3 has an invalid interface number: 179 but max is 2 [ 2326.997769][T32421] usb 5-1: config 3 has an invalid interface number: 204 but max is 2 [ 2327.006298][T32421] usb 5-1: config 3 has an invalid interface number: 167 but max is 2 [ 2327.014691][T32421] usb 5-1: config 3 has an invalid descriptor of length 97, skipping remainder of the config [ 2327.024971][T32421] usb 5-1: config 3 has 4 interfaces, different from the descriptor's value: 3 [ 2327.033921][T32421] usb 5-1: config 3 has no interface number 0 [ 2327.040298][T32421] usb 5-1: config 3 has no interface number 1 [ 2327.046657][T32421] usb 5-1: config 3 has no interface number 2 [ 2327.052838][T32421] usb 5-1: config 3 has no interface number 3 [ 2327.059154][T32421] usb 5-1: config 3 interface 42 altsetting 222 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 2327.070314][T32421] usb 5-1: config 3 interface 42 altsetting 222 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 2327.081449][T32421] usb 5-1: config 3 interface 42 altsetting 222 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 2327.092835][T32421] usb 5-1: config 3 interface 42 altsetting 222 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 2327.104089][T32421] usb 5-1: config 3 interface 42 altsetting 222 has an invalid descriptor for endpoint zero, skipping [ 2327.115292][T32421] usb 5-1: config 3 interface 42 altsetting 222 has a duplicate endpoint with address 0xA, skipping [ 2327.126259][T32421] usb 5-1: config 3 interface 42 altsetting 222 has a duplicate endpoint with address 0x4, skipping [ 2327.137127][T32421] usb 5-1: config 3 interface 42 altsetting 222 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 2327.148259][T32421] usb 5-1: config 3 interface 42 altsetting 222 has an endpoint descriptor with address 0x1C, changing to 0xC [ 2327.160108][T32421] usb 5-1: config 3 interface 42 altsetting 222 has a duplicate endpoint with address 0xC, skipping [ 2327.170983][T32421] usb 5-1: config 3 interface 42 altsetting 222 has a duplicate endpoint with address 0x3, skipping [ 2327.181852][T32421] usb 5-1: config 3 interface 179 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 2327.192770][T32421] usb 5-1: config 3 interface 179 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 2327.203746][T32421] usb 5-1: config 3 interface 179 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 2327.214559][T32421] usb 5-1: config 3 interface 179 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 2327.225451][T32421] usb 5-1: config 3 interface 179 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 2327.236218][T32421] usb 5-1: config 3 interface 179 altsetting 3 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 2327.249325][T32421] usb 5-1: too many endpoints for config 3 interface 204 altsetting 185: 164, using maximum allowed: 30 [ 2327.260664][T32421] usb 5-1: config 3 interface 204 altsetting 185 has an invalid descriptor for endpoint zero, skipping [ 2327.272160][T32421] usb 5-1: config 3 interface 204 altsetting 185 has an invalid descriptor for endpoint zero, skipping [ 2327.283390][T32421] usb 5-1: config 3 interface 204 altsetting 185 has 2 endpoint descriptors, different from the interface descriptor's value: 164 [ 2327.301988][T32421] usb 5-1: config 3 interface 167 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 2327.312840][T32421] usb 5-1: config 3 interface 167 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2327.376005][T32421] usb 5-1: config 3 interface 42 has no altsetting 0 [ 2327.396188][T32421] usb 5-1: config 3 interface 179 has no altsetting 0 [ 2327.420752][T32421] usb 5-1: config 3 interface 204 has no altsetting 0 [ 2327.449333][T32421] usb 5-1: config 3 interface 167 has no altsetting 0 [ 2327.456547][T24982] usb 6-1: Using ep0 maxpacket: 16 [ 2327.468177][T24982] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2327.477309][T32421] usb 5-1: New USB device found, idVendor=0af0, idProduct=d033, bcdDevice=4d.35 [ 2327.481810][T24982] usb 6-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.9c [ 2327.506552][T24982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.514641][T32421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.514664][T32421] usb 5-1: Product: syz [ 2327.514679][T32421] usb 5-1: Manufacturer: syz [ 2327.514693][T32421] usb 5-1: SerialNumber: syz [ 2327.541636][T24982] usb 6-1: Product: syz [ 2327.547300][T24982] usb 6-1: Manufacturer: syz [ 2327.551996][T24982] usb 6-1: SerialNumber: syz [ 2327.562872][ T3694] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2327.578138][T24982] usb 6-1: config 0 descriptor?? [ 2327.590007][T24982] usb 6-1: selecting invalid altsetting 1 [ 2327.601597][T24982] snd-usb-caiaq 6-1:0.0: can't set alt interface. [ 2327.610231][T24982] usb 6-1: unable to init card! (ret=-5) [ 2327.619946][T24982] snd-usb-caiaq 6-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 2327.632732][ T3718] loop3: detected capacity change from 0 to 1 [ 2327.643627][ T3718] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 [ 2327.664451][ T3718] loop3: p1 start 791543808 is beyond EOD, truncated [ 2327.673926][ T3718] loop3: p2 start 1633771873 is beyond EOD, truncated [ 2327.682247][ T3718] loop3: p3 start 1633771873 is beyond EOD, truncated [ 2327.693580][ T3718] loop3: p4 start 1633771873 is beyond EOD, truncated [ 2327.700858][ T3718] loop3: p5 start 1633771873 is beyond EOD, truncated [ 2327.714326][ T3718] loop3: p6 start 1633771776 is beyond EOD, truncated [ 2327.721989][ T3718] loop3: p7 start 1633771873 is beyond EOD, truncated [ 2327.729528][ T3718] loop3: p8 start 1886744434 is beyond EOD, truncated [ 2327.738605][ T3718] loop3: p9 start 1633771873 is beyond EOD, truncated [ 2327.746306][ T3718] loop3: p10 start 1633771873 is beyond EOD, truncated [ 2327.785793][T32421] hso 5-1:3.42: Not our interface [ 2327.811655][T32421] hso 5-1:3.179: Not our interface [ 2327.817900][ T3708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2327.862995][ T3708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2327.866643][T32421] hso 5-1:3.204: Not our interface [ 2327.873849][T24982] usb 6-1: USB disconnect, device number 100 [ 2327.921358][ T3720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7836'. [ 2327.942275][ T3720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7836'. [ 2328.019774][T32421] usb 5-1: USB disconnect, device number 108 [ 2328.608656][ T3730] ptrace attach of "./syz-executor exec"[28721] was attempted by "./syz-executor exec"[3730] [ 2329.084593][ T10] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2329.277154][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2329.292341][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2329.312004][ T10] usb 6-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 2329.323896][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2329.337971][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2329.366138][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2329.385096][ T10] usb 6-1: Product: syz [ 2329.389373][ T10] usb 6-1: Manufacturer: Й [ 2329.393967][ T10] usb 6-1: SerialNumber: syz [ 2329.615599][ T3739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2329.675165][ T3739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2329.678556][ T3750] FAULT_INJECTION: forcing a failure. [ 2329.678556][ T3750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2329.738751][ T3750] CPU: 0 UID: 0 PID: 3750 Comm: syz.2.7847 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 2329.738776][ T3750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2329.738788][ T3750] Call Trace: [ 2329.738797][ T3750] [ 2329.738805][ T3750] dump_stack_lvl+0x189/0x250 [ 2329.738833][ T3750] ? __pfx____ratelimit+0x10/0x10 [ 2329.738864][ T3750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2329.738888][ T3750] ? __pfx__printk+0x10/0x10 [ 2329.738918][ T3750] should_fail_ex+0x414/0x560 [ 2329.738944][ T3750] _copy_to_user+0x31/0xb0 [ 2329.738962][ T3750] pagemap_read+0x4d4/0x7b0 [ 2329.738989][ T3750] ? __pfx_pagemap_read+0x10/0x10 [ 2329.739012][ T3750] ? rw_verify_area+0x258/0x650 [ 2329.739035][ T3750] ? __pfx_pagemap_read+0x10/0x10 [ 2329.739054][ T3750] vfs_read+0x200/0x980 [ 2329.739085][ T3750] ? __pfx_vfs_read+0x10/0x10 [ 2329.739111][ T3750] ? __fget_files+0x2a/0x420 [ 2329.739132][ T3750] ? __fget_files+0x2a/0x420 [ 2329.739149][ T3750] ? __fget_files+0x3a0/0x420 [ 2329.739165][ T3750] ? __fget_files+0x2a/0x420 [ 2329.739188][ T3750] __x64_sys_pread64+0x193/0x220 [ 2329.739206][ T3750] ? __pfx___x64_sys_pread64+0x10/0x10 [ 2329.739219][ T3750] ? rcu_is_watching+0x15/0xb0 [ 2329.739244][ T3750] ? do_syscall_64+0xbe/0x3b0 [ 2329.739267][ T3750] do_syscall_64+0xfa/0x3b0 [ 2329.739286][ T3750] ? lockdep_hardirqs_on+0x9c/0x150 [ 2329.739305][ T3750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2329.739319][ T3750] ? clear_bhb_loop+0x60/0xb0 [ 2329.739340][ T3750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2329.739353][ T3750] RIP: 0033:0x7f467358e929 [ 2329.739365][ T3750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2329.739373][ T3750] RSP: 002b:00007f4674372038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2329.739384][ T3750] RAX: ffffffffffffffda RBX: 00007f46737b5fa0 RCX: 00007f467358e929 [ 2329.739391][ T3750] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000003 [ 2329.739398][ T3750] RBP: 00007f4674372090 R08: 0000000000000000 R09: 0000000000000000 [ 2329.739404][ T3750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2329.739409][ T3750] R13: 0000000000000000 R14: 00007f46737b5fa0 R15: 00007f46738dfa28 [ 2329.739424][ T3750] [ 2329.975704][ T10] usb 6-1: 0:2 : does not exist [ 2330.097302][ T2150] Bluetooth: hci0: command 0x0405 tx timeout [ 2330.117767][ T10] usb 6-1: USB disconnect, device number 101 [ 2330.203727][T31871] udevd[31871]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2330.243325][ T3754] kvm: user requested TSC rate below hardware speed [ 2330.447794][ T3764] tipc: Started in network mode [ 2330.464624][ T3764] tipc: Node identity , cluster identity 4711 [ 2330.768567][T24972] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2330.905643][ T10] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2330.913433][T24972] usb 3-1: device descriptor read/64, error -71 [ 2330.915825][ T3778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2330.931316][ T3778] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7855'. [ 2330.946551][ T3778] gretap1: entered promiscuous mode [ 2331.064926][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 2331.084418][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2331.107377][ T10] usb 5-1: config 0 has no interface number 0 [ 2331.114158][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2331.141011][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2331.151906][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2331.164631][T24972] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2331.183190][ T10] usb 5-1: config 0 descriptor?? [ 2331.304937][T24972] usb 3-1: device descriptor read/64, error -71 [ 2331.403773][ T3784] ptrace attach of "./syz-executor exec"[2151] was attempted by "./syz-executor exec"[3784] [ 2331.464810][T24972] usb usb3-port1: attempt power cycle [ 2331.490192][ T10] usbhid 5-1:0.1: can't add hid device: -71 [ 2331.506809][ T10] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 2331.540925][ T10] usb 5-1: USB disconnect, device number 109 [ 2331.848809][T24972] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2331.935364][T24972] usb 3-1: device descriptor read/8, error -71 [ 2331.951029][ T3790] netlink: 'syz.5.7858': attribute type 12 has an invalid length. [ 2332.285177][T24972] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2332.448455][T24972] usb 3-1: device descriptor read/8, error -71 [ 2332.565214][T24972] usb usb3-port1: unable to enumerate USB device [ 2332.755220][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2332.769886][ T3800] delete_channel: no stack [ 2332.925106][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 2333.061657][T24972] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2333.424615][T24972] usb 5-1: Using ep0 maxpacket: 8 [ 2333.654771][T24972] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2333.663890][T24972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2333.672018][T24972] usb 5-1: Product: syz [ 2333.676645][T24972] usb 5-1: Manufacturer: syz [ 2333.681299][T24972] usb 5-1: SerialNumber: syz [ 2333.689578][T24972] usb 5-1: config 0 descriptor?? [ 2333.950637][ T3796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2334.018632][T24972] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2334.055285][ T3796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2334.354684][T24972] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2334.407789][T24972] usb 5-1: USB disconnect, device number 110 [ 2335.641679][ T3813] veth0_to_team: entered promiscuous mode [ 2335.705806][ T3813] veth0_to_team: entered allmulticast mode [ 2335.779665][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2335.833995][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 2335.875189][ T10] usb 7-1: can't read configurations, error -71 [ 2336.355272][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 2336.562938][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2336.604608][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2336.615683][ T10] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2336.632256][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2336.655542][ T10] usb 7-1: config 0 descriptor?? [ 2336.901484][ T3841] ptrace attach of "./syz-executor exec"[28578] was attempted by "./syz-executor exec"[3841] [ 2336.956636][T24972] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2337.014676][T24971] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2337.079155][ T10] cp2112 0003:10C4:EA90.0079: unknown main item tag 0x0 [ 2337.090560][ T10] cp2112 0003:10C4:EA90.0079: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 2337.124644][T24972] usb 3-1: Using ep0 maxpacket: 8 [ 2337.136041][T24972] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 2337.154672][T24972] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2337.175144][T24971] usb 5-1: Using ep0 maxpacket: 8 [ 2337.180529][T24972] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 2337.223471][T24971] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2337.242619][T24972] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2337.256295][T24971] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2337.274147][ T10] cp2112 0003:10C4:EA90.0079: Part Number: 0x82 Device Version: 0xFE [ 2337.283085][T24971] usb 5-1: config 1 has no interface number 1 [ 2337.299946][T24972] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 2337.311386][T24971] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2337.326512][T24972] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2337.339712][T24972] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 2337.352776][T24972] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2337.369393][T24971] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2337.378970][T24971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.395047][T24971] usb 5-1: Product: syz [ 2337.399495][T24971] usb 5-1: Manufacturer: ٦젊킘꒱򀊺胲騉ᐔ妏蒝䶊頻Ⱓ“ᐄ饉ĕ [ 2337.409630][T24971] usb 5-1: SerialNumber: syz [ 2337.415682][T24972] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 2337.428298][T24972] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2337.461433][T24972] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 2337.473995][T24972] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2337.496745][T24972] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2337.506234][T24972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.514268][T24972] usb 3-1: Product: syz [ 2337.519868][T24972] usb 3-1: Manufacturer: syz [ 2337.525253][T24972] usb 3-1: SerialNumber: syz [ 2337.752284][ T3822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2337.777469][ T3838] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7874'. [ 2337.787904][ T3822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2337.800462][ T3838] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7874'. [ 2337.868829][ T10] cp2112 0003:10C4:EA90.0079: error setting SMBus config [ 2337.882709][ T10] cp2112 0003:10C4:EA90.0079: probe with driver cp2112 failed with error -71 [ 2337.895780][ T3838] @: entered allmulticast mode [ 2338.098826][T24972] adutux 3-1:168.0: interrupt endpoints not found [ 2338.127681][ T10] usb 7-1: USB disconnect, device number 23 [ 2338.134738][T24972] usb 3-1: USB disconnect, device number 36 [ 2338.202853][T24971] usb 5-1: found format II with max.bitrate = 9, frame size=1 [ 2338.215316][T24971] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2338.256829][T24971] usb 5-1: USB disconnect, device number 111 [ 2338.321778][T31871] udevd[31871]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2338.881939][ T3858] input: syz1 as /devices/virtual/input/input156 [ 2338.890640][ T3862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7878'. [ 2339.594949][T24971] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2339.604627][T24972] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2339.768841][T24971] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2339.780738][T24971] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2339.805036][T24972] usb 3-1: Using ep0 maxpacket: 32 [ 2339.819995][T24972] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 2339.831207][T24972] usb 3-1: config 0 has no interface number 0 [ 2339.841808][T24971] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2339.880304][T24972] usb 3-1: config 0 interface 184 has no altsetting 0 [ 2339.947361][T24971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2339.990936][T24971] usb 5-1: SerialNumber: syz [ 2339.997613][T24972] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2340.006746][T24972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.019149][T24972] usb 3-1: Product: syz [ 2340.027163][T24972] usb 3-1: Manufacturer: syz [ 2340.041605][T24972] usb 3-1: SerialNumber: syz [ 2340.056428][T24972] usb 3-1: config 0 descriptor?? [ 2340.228478][T24972] smsc75xx v1.0.0 [ 2340.680755][T24972] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 2340.728382][T24972] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 2340.752667][T24972] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2340.771663][T24971] usb 5-1: 0:2 : does not exist [ 2340.832850][T24972] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2340.843788][T24972] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2340.864898][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2340.864911][ T30] audit: type=1326 audit(1751265174.158:9511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3883 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5878e929 code=0x7ffc0000 [ 2340.908060][T24971] usb 5-1: USB disconnect, device number 112 [ 2340.917002][T24972] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2340.943957][T24972] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 2340.955332][ T30] audit: type=1326 audit(1751265174.158:9512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3883 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a5878e929 code=0x7ffc0000 [ 2340.990621][T24972] usb 3-1: USB disconnect, device number 37 [ 2341.000150][T31871] udevd[31871]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2341.041403][ T30] audit: type=1326 audit(1751265174.158:9513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3883 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5878e929 code=0x7ffc0000 [ 2341.087200][ T30] audit: type=1326 audit(1751265174.158:9514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3883 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7a5878e929 code=0x7ffc0000 [ 2341.112522][ T30] audit: type=1326 audit(1751265174.168:9515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3883 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5878e929 code=0x7ffc0000 [ 2341.139668][ T30] audit: type=1326 audit(1751265174.168:9516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3883 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5878e929 code=0x7ffc0000 [ 2341.170988][ T3895] fuse: Bad value for 'fd' [ 2341.178052][ T30] audit: type=1326 audit(1751265174.168:9517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3883 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a5878e929 code=0x7ffc0000 [ 2341.200943][ T30] audit: type=1326 audit(1751265174.168:9518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3883 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5878e929 code=0x7ffc0000 [ 2341.224307][ T30] audit: type=1326 audit(1751265174.168:9519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3883 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7a5878e929 code=0x7ffc0000 [ 2341.307829][ T30] audit: type=1326 audit(1751265174.168:9520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3883 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5878e929 code=0x7ffc0000 [ 2342.034639][T32421] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2342.044864][T17247] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 2342.189796][T32421] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2342.211416][T17247] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 2342.234974][T32421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2342.247677][T17247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2342.268402][T32421] usb 6-1: Product: syz [ 2342.272607][T32421] usb 6-1: Manufacturer: syz [ 2342.298921][T17247] usb 5-1: config 0 descriptor?? [ 2342.304714][T32421] usb 6-1: SerialNumber: syz [ 2342.335169][T32421] usb 6-1: config 0 descriptor?? [ 2342.952878][T17247] chicony 0003:04F2:1236.007A: hidraw0: USB HID v1.01 Device [HID 04f2:1236] on usb-dummy_hcd.4-1/input0 [ 2342.996653][ T3906] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7892'. [ 2343.032730][ T3906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7892'. [ 2343.371167][T24972] usb 6-1: USB disconnect, device number 102 [ 2343.449300][T32421] usb 5-1: USB disconnect, device number 113 [ 2343.675737][ T3940] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7898'. [ 2344.662005][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.668846][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.072236][ T3969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7906'. [ 2345.238155][ T3969] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 2345.246380][ T3969] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2345.255223][ T3969] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2345.263901][ T3969] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2345.278262][ T3969] vxlan0: entered promiscuous mode [ 2345.334804][ T10] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2345.484894][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 2345.501720][ T10] usb 5-1: config 1 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2345.513198][ T10] usb 5-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 1023 [ 2345.543156][ T10] usb 5-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023 [ 2345.590694][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2345.607871][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2345.622224][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2345.654736][ T10] usb 5-1: Product: 衟렸㼓끻㿭﮹坍왙譝୙춻䍹ꮎ켩ꏦ䀱拹㴅⢽슌ﷇ᭓慜䍴琗삥﮳ᒔ鷭ℊ඾࢔鷿낊ᬌϺꢍ틗ḃ쐣糭愚┄⊵ઍ⮐㛓⣭ᄠ끳簑䛳勒컮龐້藇갛ª珐ឍ鵑옔㈤媙皑篰구⹓뿒襀굤護ૣ௢漰텅抌Კ覦䛋Њ粦壨빢뀥쐑䶘妕 [ 2345.769284][ T10] usb 5-1: Manufacturer: Ћ [ 2345.779230][ T10] usb 5-1: SerialNumber: ၤ扮૭륃⏾쵎潣㼶켥쮑鞾֔⿝껼틧㓷呿㵟ꚤ改۬阅椭锆烰㣫㰩茓鹿뫥鶔攢챮钟毾힜색ᰣ깹槡亜쌅轶汣弊䑁蹦㝱槺焠쟞ᑨ쪂듴䱮꤁듖釯犄ꀵ牔ꛘ屣땢ⲛꢂᣲ [ 2345.833780][ T3970] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2345.841700][ T3970] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2346.730000][ T5149] Bluetooth: hci0: command 0x0405 tx timeout [ 2347.008146][ T3997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7918'. [ 2347.907517][ T10] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 2348.010156][ T10] usb 5-1: USB disconnect, device number 114 [ 2349.328916][ T4044] FAULT_INJECTION: forcing a failure. [ 2349.328916][ T4044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2349.424883][ T4044] CPU: 1 UID: 0 PID: 4044 Comm: syz.2.7929 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 2349.424909][ T4044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2349.424919][ T4044] Call Trace: [ 2349.424926][ T4044] [ 2349.424934][ T4044] dump_stack_lvl+0x189/0x250 [ 2349.424962][ T4044] ? __pfx____ratelimit+0x10/0x10 [ 2349.424986][ T4044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2349.425008][ T4044] ? __pfx__printk+0x10/0x10 [ 2349.425036][ T4044] should_fail_ex+0x414/0x560 [ 2349.425062][ T4044] _copy_to_user+0x31/0xb0 [ 2349.425081][ T4044] pagemap_read+0x4d4/0x7b0 [ 2349.425108][ T4044] ? __pfx_pagemap_read+0x10/0x10 [ 2349.425131][ T4044] ? rw_verify_area+0x258/0x650 [ 2349.425154][ T4044] ? __pfx_pagemap_read+0x10/0x10 [ 2349.425172][ T4044] vfs_read+0x200/0x980 [ 2349.425204][ T4044] ? __pfx_vfs_read+0x10/0x10 [ 2349.425229][ T4044] ? __fget_files+0x2a/0x420 [ 2349.425250][ T4044] ? __fget_files+0x2a/0x420 [ 2349.425266][ T4044] ? __fget_files+0x3a0/0x420 [ 2349.425283][ T4044] ? __fget_files+0x2a/0x420 [ 2349.425309][ T4044] __x64_sys_pread64+0x193/0x220 [ 2349.425329][ T4044] ? __pfx___x64_sys_pread64+0x10/0x10 [ 2349.425344][ T4044] ? rcu_is_watching+0x15/0xb0 [ 2349.425373][ T4044] ? do_syscall_64+0xbe/0x3b0 [ 2349.425399][ T4044] do_syscall_64+0xfa/0x3b0 [ 2349.425420][ T4044] ? lockdep_hardirqs_on+0x9c/0x150 [ 2349.425441][ T4044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2349.425458][ T4044] ? clear_bhb_loop+0x60/0xb0 [ 2349.425478][ T4044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2349.425495][ T4044] RIP: 0033:0x7f467358e929 [ 2349.425511][ T4044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2349.425526][ T4044] RSP: 002b:00007f4674372038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2349.425544][ T4044] RAX: ffffffffffffffda RBX: 00007f46737b5fa0 RCX: 00007f467358e929 [ 2349.425557][ T4044] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000003 [ 2349.425568][ T4044] RBP: 00007f4674372090 R08: 0000000000000000 R09: 0000000000000000 [ 2349.425578][ T4044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2349.425599][ T4044] R13: 0000000000000000 R14: 00007f46737b5fa0 R15: 00007f46738dfa28 [ 2349.425626][ T4044] [ 2349.857172][ T4046] ptrace attach of "./syz-executor exec"[27035] was attempted by "./syz-executor exec"[4046] [ 2350.953965][ T4067] loop6: detected capacity change from 0 to 7 [ 2351.046857][T31871] Dev loop6: unable to read RDB block 7 [ 2351.052482][T31871] loop6: AHDI p1 p2 p3 p4 [ 2351.102241][T31871] loop6: partition table partially beyond EOD, truncated [ 2351.133718][T31871] loop6: p1 start 926365495 is beyond EOD, truncated [ 2351.169967][T31871] loop6: p2 size 47 extends beyond EOD, truncated [ 2351.225639][T31871] loop6: p3 start 1886353253 is beyond EOD, truncated [ 2351.249491][ T4067] Dev loop6: unable to read RDB block 7 [ 2351.266406][ T4067] loop6: AHDI p1 p2 p3 p4 [ 2351.270897][ T4067] loop6: partition table partially beyond EOD, truncated [ 2351.292015][ T4067] loop6: p1 start 926365495 is beyond EOD, truncated [ 2351.309102][ T4067] loop6: p2 size 47 extends beyond EOD, truncated [ 2351.346715][ T4067] loop6: p3 start 1886353253 is beyond EOD, truncated [ 2351.612218][T31871] udevd[31871]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 2351.712706][T31871] udevd[31871]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 2351.804259][ T4087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7938'. [ 2353.044748][T17247] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2353.158114][ T4124] loop6: detected capacity change from 0 to 7 [ 2353.203040][T31871] Dev loop6: unable to read RDB block 7 [ 2353.214550][T31871] loop6: AHDI p1 p2 p3 p4 [ 2353.227976][T17247] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2353.237911][T17247] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2353.253762][T31871] loop6: partition table partially beyond EOD, truncated [ 2353.264573][T17247] usb 5-1: config 1 has no interface number 1 [ 2353.278262][T31871] loop6: p1 start 926365495 is beyond EOD, truncated [ 2353.292917][T17247] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2353.310549][T31871] loop6: p2 size 47 extends beyond EOD, truncated [ 2353.318971][T31871] loop6: p3 start 1886353253 is beyond EOD, truncated [ 2353.328465][T17247] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2353.339312][T17247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2353.350063][T17247] usb 5-1: Product: syz [ 2353.354428][T17247] usb 5-1: Manufacturer: syz [ 2353.360159][ T4124] Dev loop6: unable to read RDB block 7 [ 2353.367101][ T4124] loop6: AHDI p1 p2 p3 p4 [ 2353.372486][ T4124] loop6: partition table partially beyond EOD, truncated [ 2353.379596][T17247] usb 5-1: SerialNumber: syz [ 2353.405416][ T4124] loop6: p1 start 926365495 is beyond EOD, truncated [ 2353.412923][ T4124] loop6: p2 size 47 extends beyond EOD, truncated [ 2353.435667][ T4124] loop6: p3 start 1886353253 is beyond EOD, truncated [ 2353.504437][ T4126] ptrace attach of "./syz-executor exec"[28578] was attempted by "./syz-executor exec"[4126] [ 2353.596493][T31871] udevd[31871]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 2353.753850][T31871] udevd[31871]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 2353.958579][ T4129] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 2353.965115][ T4129] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2354.081807][ T4129] vhci_hcd vhci_hcd.0: Device attached [ 2354.264698][T32421] vhci_hcd: vhci_device speed not set [ 2354.311390][T24975] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2354.339217][T32421] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 2354.464703][T24975] usb 3-1: device descriptor read/64, error -71 [ 2354.724685][T24975] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2354.895770][T24975] usb 3-1: device descriptor read/64, error -71 [ 2355.015151][T24975] usb usb3-port1: attempt power cycle [ 2355.851113][T24975] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2356.015827][T24975] usb 3-1: device descriptor read/8, error -71 [ 2356.163673][T17247] usb 5-1: found format II with max.bitrate = 26774, frame size=2 [ 2356.198836][T17247] usb 5-1: found format II with max.bitrate = 26774, frame size=2 [ 2356.244747][T17247] usb 5-1: failed to enable PITCH for EP 0x82 [ 2356.274657][T24975] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2356.343546][T17247] usb 5-1: USB disconnect, device number 115 [ 2356.366486][T24975] usb 3-1: device descriptor read/8, error -71 [ 2356.466272][ T4156] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7955'. [ 2356.516559][T24975] usb usb3-port1: unable to enumerate USB device [ 2356.539823][ T4156] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7955'. [ 2356.568902][ T4156] netem: invalid attributes len -7 [ 2356.574065][ T4156] netem: change failed [ 2356.633606][ T4167] loop6: detected capacity change from 0 to 7 [ 2356.656807][ T4167] Dev loop6: unable to read RDB block 7 [ 2356.715404][ T4167] loop6: AHDI p1 p2 p3 p4 [ 2356.721064][ T4167] loop6: partition table partially beyond EOD, truncated [ 2356.734804][ T4167] loop6: p1 start 926365495 is beyond EOD, truncated [ 2356.748929][ T4167] loop6: p2 size 47 extends beyond EOD, truncated [ 2356.775132][ T4167] loop6: p3 start 1886353253 is beyond EOD, truncated [ 2356.889301][ T4172] fuse: Bad value for 'user_id' [ 2356.894207][ T4172] fuse: Bad value for 'user_id' [ 2356.972146][T31871] udevd[31871]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 2356.993917][ T4131] vhci_hcd: connection reset by peer [ 2357.007164][ T60] vhci_hcd: stop threads [ 2357.013409][ T60] vhci_hcd: release socket [ 2357.028204][ T60] vhci_hcd: disconnect device [ 2357.794450][ T4180] netlink: 'syz.0.7958': attribute type 20 has an invalid length. [ 2358.182771][ T4190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7963'. [ 2358.764578][T24975] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 2358.937587][T24975] usb 7-1: Using ep0 maxpacket: 32 [ 2358.968563][T24975] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2358.977997][T24975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2359.014559][T24975] usb 7-1: Product: syz [ 2359.035447][T24975] usb 7-1: Manufacturer: syz [ 2359.048678][T24975] usb 7-1: SerialNumber: syz [ 2359.076427][T24975] usb 7-1: config 0 descriptor?? [ 2359.094919][T24975] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2359.170095][ T5935] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2359.357608][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 2359.424660][T32421] vhci_hcd: vhci_device speed not set [ 2359.485203][ T5935] usb 3-1: config 127 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2359.514950][ T5935] usb 3-1: config 127 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2359.660629][ T5935] usb 3-1: config 127 interface 0 has no altsetting 0 [ 2359.670419][ T5935] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 2359.859031][ T4213] ptrace attach of "./syz-executor exec"[28578] was attempted by "./syz-executor exec"[4213] [ 2359.879718][T24975] gspca_ov534_9: reg_w failed -71 [ 2359.931662][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2360.254610][T24975] gspca_ov534_9: Unknown sensor 0000 [ 2360.254741][T24975] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 2360.305149][T24975] usb 7-1: USB disconnect, device number 24 [ 2360.421481][ T5935] monterey 0003:0566:3004.007B: unknown main item tag 0x0 [ 2360.442521][ T5935] monterey 0003:0566:3004.007B: unknown main item tag 0x0 [ 2360.450979][ T5935] monterey 0003:0566:3004.007B: unknown main item tag 0x0 [ 2360.491728][ T5935] monterey 0003:0566:3004.007B: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.2-1/input0 [ 2360.530057][ T4218] loop6: detected capacity change from 0 to 7 [ 2360.548171][ T2151] Dev loop6: unable to read RDB block 7 [ 2360.553784][ T2151] loop6: AHDI p1 p2 p3 p4 [ 2360.568629][ T2151] loop6: partition table partially beyond EOD, truncated [ 2360.595927][ T2151] loop6: p1 start 926365495 is beyond EOD, truncated [ 2360.631204][ T2151] loop6: p2 size 47 extends beyond EOD, truncated [ 2360.675482][ T2151] loop6: p3 start 1886353253 is beyond EOD, truncated [ 2360.704973][ T4218] Dev loop6: unable to read RDB block 7 [ 2360.713777][ T4218] loop6: AHDI p1 p2 p3 p4 [ 2360.740403][ T4218] loop6: partition table partially beyond EOD, truncated [ 2360.759115][ T4218] loop6: p1 start 926365495 is beyond EOD, truncated [ 2360.779759][ T4218] loop6: p2 size 47 extends beyond EOD, truncated [ 2360.798855][ T4218] loop6: p3 start 1886353253 is beyond EOD, truncated [ 2360.851161][ T9606] usb 3-1: USB disconnect, device number 42 [ 2361.122117][T31871] udevd[31871]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 2361.209454][T31871] udevd[31871]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 2361.236803][ T4234] binder: BINDER_SET_CONTEXT_MGR already set [ 2361.255330][ T5935] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 2361.267538][ T4234] binder: 4231:4234 ioctl 4018620d 200000000040 returned -16 [ 2361.288587][ T4232] binder: 4231:4232 ioctl 89e1 2000000000c0 returned -22 [ 2361.324322][T31871] udevd[31871]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 2361.575173][ T9606] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 2361.725416][ T9606] usb 6-1: Using ep0 maxpacket: 16 [ 2361.763921][ T9606] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2361.804212][ T9606] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2361.839331][ T9606] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 2361.858337][ T9606] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 2361.869232][ T9606] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2361.877911][ T9606] usb 6-1: Product: syz [ 2361.882359][ T9606] usb 6-1: Manufacturer: syz [ 2361.885060][T32421] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2361.888290][ T9606] usb 6-1: SerialNumber: syz [ 2361.923771][ T9606] usb 6-1: config 0 descriptor?? [ 2361.942571][ T4237] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2361.962959][ T9606] mceusb 6-1:0.0: mceusb_dev_probe: device setup failed! [ 2361.981634][ T9606] mceusb 6-1:0.0: probe with driver mceusb failed with error -12 [ 2362.075591][ T5935] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 2362.247773][ T5935] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2362.277546][ T9606] usb 6-1: USB disconnect, device number 103 [ 2362.289165][ T5935] usb 7-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 2362.320565][ T5935] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 2362.360384][ T5935] usb 7-1: Product: syz [ 2362.379436][ T5935] usb 7-1: Manufacturer: syz [ 2362.394774][ T5935] usb 7-1: SerialNumber: syz [ 2362.402315][ T5935] usb 7-1: config 0 descriptor?? [ 2362.419014][ T5935] gspca_main: conex-2.14.0 probing 0572:0041 [ 2362.585221][ T31] INFO: task syz.3.7396:1955 blocked for more than 143 seconds. [ 2362.636903][ T4242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2362.666245][ T4242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2362.677830][ T31] Not tainted 6.16.0-rc4-syzkaller #0 [ 2362.693142][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2362.703354][ T31] task:syz.3.7396 state:D stack:25352 pid:1955 tgid:1954 ppid:27472 task_flags:0x400140 flags:0x00004004 [ 2362.727077][ T31] Call Trace: [ 2362.732697][ T31] [ 2362.744256][ T31] __schedule+0x16f5/0x4d00 [ 2362.751601][ T31] ? __lock_acquire+0xab9/0xd20 [ 2362.767447][ T4242] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7974'. [ 2362.897584][ T31] ? schedule+0x165/0x360 [ 2362.903959][ T31] ? __pfx___schedule+0x10/0x10 [ 2362.927124][ T31] ? schedule+0x91/0x360 [ 2362.942802][ T31] schedule+0x165/0x360 [ 2362.961291][ T31] schedule_preempt_disabled+0x13/0x30 [ 2362.977900][ T31] __mutex_lock+0x724/0xe80 [ 2362.997467][ T31] ? __mutex_lock+0x51b/0xe80 [ 2362.998092][ T5935] usb 7-1: USB disconnect, device number 26 [ 2363.020273][ T31] ? snd_seq_info_clients_read+0x14a/0x7e0 [ 2363.033531][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2363.052650][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2363.071177][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2363.095062][ T31] ? __up_read+0x280/0x680 [ 2363.112289][ T31] ? client_use_ptr+0xa9/0xab0 [ 2363.131226][ T31] ? snd_seq_info_clients_read+0x71d/0x7e0 [ 2363.148714][ T31] snd_seq_info_clients_read+0x14a/0x7e0 [ 2363.167529][ T31] snd_info_seq_show+0xd6/0x100 [ 2363.180623][ T31] seq_read_iter+0x4ea/0xe10 [ 2363.194089][ T31] seq_read+0x2e2/0x3d0 [ 2363.212128][ T31] ? __pfx_seq_read+0x10/0x10 [ 2363.239585][ T31] ? __mutex_trylock_common+0x153/0x260 [ 2363.249404][ T31] ? __pfx_seq_read+0x10/0x10 [ 2363.254152][ T31] proc_reg_read+0x1e9/0x2e0 [ 2363.259162][ T31] ? __pfx_proc_reg_read+0x10/0x10 [ 2363.264527][ T31] vfs_read+0x200/0x980 [ 2363.268735][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2363.277443][ T31] ? __pfx_vfs_read+0x10/0x10 [ 2363.307789][ T31] ? __fget_files+0x2a/0x420 [ 2363.327955][ T31] ? __fget_files+0x3a0/0x420 [ 2363.350247][ T31] ? __fget_files+0x2a/0x420 [ 2363.367872][ T31] ksys_read+0x145/0x250 [ 2363.372179][ T31] ? __pfx_ksys_read+0x10/0x10 [ 2363.390986][ T31] ? rcu_is_watching+0x15/0xb0 [ 2363.403872][ T31] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 2363.424779][ T31] ? syscall_user_dispatch+0x4f/0x90 [ 2363.438260][ T31] do_syscall_64+0xfa/0x3b0 [ 2363.442853][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2363.457219][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2363.463934][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2363.473895][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2363.480290][ T31] RIP: 0033:0x7f2f10b8e929 [ 2363.489517][ T31] RSP: 002b:00007f2f11a81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2363.514245][ T31] RAX: ffffffffffffffda RBX: 00007f2f10db5fa0 RCX: 00007f2f10b8e929 [ 2363.524080][ T31] RDX: 0000000000002020 RSI: 0000200000004000 RDI: 0000000000000004 [ 2363.535499][ T31] RBP: 00007f2f10c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 2363.545862][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2363.554151][ T31] R13: 0000000000000000 R14: 00007f2f10db5fa0 R15: 00007f2f10edfa28 [ 2363.563890][ T31] [ 2363.576474][ T31] [ 2363.576474][ T31] Showing all locks held in the system: [ 2363.584420][ T31] 1 lock held by khungtaskd/31: [ 2363.610035][ T31] #0: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2363.621649][ T31] 1 lock held by klogd/5188: [ 2363.632474][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2363.648202][ T31] 2 locks held by getty/5595: [ 2363.657227][ T31] #0: ffff88814c36d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2363.672879][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2363.690324][ T31] 4 locks held by kworker/u8:20/14435: [ 2363.696366][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2363.707804][ T31] #1: ffffc9000fda7bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2363.721296][ T31] #2: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: batadv_nc_worker+0xd2/0x610 [ 2363.730964][ T31] #3: ffffffff99d6c060 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 2363.741974][ T31] 1 lock held by syz.1.5795/28363: [ 2363.747280][ T31] #0: ffff8880331b61d0 (&client->ioctl_mutex){+.+.}-{4:4}, at: snd_seq_ioctl+0x232/0x420 [ 2363.758757][ T31] 5 locks held by kworker/1:1/32421: [ 2363.764273][ T31] #0: ffff888140ad2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2363.776955][ T31] #1: ffffc9000408fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2363.789441][ T31] #2: ffff88814437e198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 2363.799661][ T31] #3: ffff888144391510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 2363.812949][ T31] #4: ffff888143faab68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 2363.829264][ T31] 3 locks held by syz.3.7396/1955: [ 2363.843316][ T31] #0: ffff88802ef747f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 2363.868415][ T31] #1: ffff888059a44668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 2363.882211][ T31] #2: ffff8880331b61d0 (&client->ioctl_mutex){+.+.}-{4:4}, at: snd_seq_info_clients_read+0x14a/0x7e0 [ 2363.895608][ T31] 1 lock held by syz.4.7977/4249: [ 2363.900660][ T31] #0: ffffffff8e144800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2363.912927][ T31] 1 lock held by syz.5.7978/4259: [ 2363.918427][ T31] [ 2363.921200][ T31] ============================================= [ 2363.921200][ T31] [ 2363.931741][ T31] NMI backtrace for cpu 0 [ 2363.931759][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 2363.931779][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2363.931789][ T31] Call Trace: [ 2363.931797][ T31] [ 2363.931804][ T31] dump_stack_lvl+0x189/0x250 [ 2363.931833][ T31] ? __wake_up_klogd+0xd9/0x110 [ 2363.931854][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2363.931877][ T31] ? __pfx__printk+0x10/0x10 [ 2363.931906][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2363.931929][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2363.931945][ T31] ? _printk+0xcf/0x120 [ 2363.931967][ T31] ? __pfx__printk+0x10/0x10 [ 2363.931987][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2363.932011][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2363.932033][ T31] watchdog+0xfee/0x1030 [ 2363.932056][ T31] ? watchdog+0x1de/0x1030 [ 2363.932083][ T31] kthread+0x70e/0x8a0 [ 2363.932113][ T31] ? __pfx_watchdog+0x10/0x10 [ 2363.932132][ T31] ? __pfx_kthread+0x10/0x10 [ 2363.932151][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2363.932173][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2363.932193][ T31] ? __pfx_kthread+0x10/0x10 [ 2363.932212][ T31] ret_from_fork+0x3fc/0x770 [ 2363.932237][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2363.932263][ T31] ? __switch_to_asm+0x39/0x70 [ 2363.932279][ T31] ? __switch_to_asm+0x33/0x70 [ 2363.932294][ T31] ? __pfx_kthread+0x10/0x10 [ 2363.932313][ T31] ret_from_fork_asm+0x1a/0x30 [ 2363.932345][ T31] [ 2363.932351][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2364.089702][ C1] NMI backtrace for cpu 1 [ 2364.089719][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 2364.089738][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2364.089751][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2364.089777][ C1] Code: 03 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 35 21 00 f3 0f 1e fa fb f4 d8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2364.089791][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 2364.089805][ C1] RAX: 5bffa083bb5b1a00 RBX: ffffffff81974d88 RCX: 5bffa083bb5b1a00 [ 2364.089818][ C1] RDX: 0000000000000001 RSI: ffffffff8d98202e RDI: ffffffff8be28c80 [ 2364.089829][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 2364.089841][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa104f0 [ 2364.089853][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a51b40 [ 2364.089864][ C1] FS: 0000000000000000(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 2364.089877][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2364.089888][ C1] CR2: 00002000003e0030 CR3: 0000000066b5e000 CR4: 00000000003526f0 [ 2364.089902][ C1] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 2364.089912][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2364.089922][ C1] Call Trace: [ 2364.089930][ C1] [ 2364.089936][ C1] default_idle+0x13/0x20 [ 2364.089951][ C1] default_idle_call+0x74/0xb0 [ 2364.089967][ C1] do_idle+0x1e8/0x510 [ 2364.089984][ C1] ? __pfx_do_idle+0x10/0x10 [ 2364.090007][ C1] cpu_startup_entry+0x44/0x60 [ 2364.090021][ C1] start_secondary+0x101/0x110 [ 2364.090040][ C1] common_startup_64+0x13e/0x147 [ 2364.090064][ C1] [ 2364.354785][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2364.361687][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 2364.371773][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2364.381851][ T31] Call Trace: [ 2364.385144][ T31] [ 2364.388091][ T31] dump_stack_lvl+0x99/0x250 [ 2364.392707][ T31] ? __asan_memcpy+0x40/0x70 [ 2364.397323][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2364.402544][ T31] ? __pfx__printk+0x10/0x10 [ 2364.407157][ T31] panic+0x2db/0x790 [ 2364.411075][ T31] ? __pfx_panic+0x10/0x10 [ 2364.415504][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 2364.421335][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2364.426727][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 2364.432892][ T31] watchdog+0x102d/0x1030 [ 2364.437237][ T31] ? watchdog+0x1de/0x1030 [ 2364.441657][ T31] kthread+0x70e/0x8a0 [ 2364.445715][ T31] ? __pfx_watchdog+0x10/0x10 [ 2364.450387][ T31] ? __pfx_kthread+0x10/0x10 [ 2364.454983][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2364.460190][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2364.465381][ T31] ? __pfx_kthread+0x10/0x10 [ 2364.469959][ T31] ret_from_fork+0x3fc/0x770 [ 2364.474631][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2364.479749][ T31] ? __switch_to_asm+0x39/0x70 [ 2364.484513][ T31] ? __switch_to_asm+0x33/0x70 [ 2364.489293][ T31] ? __pfx_kthread+0x10/0x10 [ 2364.493903][ T31] ret_from_fork_asm+0x1a/0x30 [ 2364.498695][ T31] [ 2364.501969][ T31] Kernel Offset: disabled [ 2364.506287][ T31] Rebooting in 86400 seconds..